Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

When a new identity federation applies to join eduGAIN, the eduGAIN Secretariat and business development team will work closely with them to help them prepare and meet all the membership requirements.  The following steps will be taken and will be used as a template to manage Candidate applications. Each "step" may run concurrently, depending the on the readiness of the federation.

Candidate NameFederation X
Ticket Number

TT#2025040334000387


eduGAIN New Candidate Process

Signed declaration sg
StepsRequirementsActionsOwnerTimeframeNotes
Step 1: Initial application meeting / readiness discussion

This initial meeting will talk the candidate through the joining process, get an understanding of the technical infrastructure of the federation and it's maturity and also share information about useful resources for the federation such as the eduGAIN website and wiki and the REFEDS resources

If not already familiar, federations will also be talked through the available document templates and the various eduGAIN tools that can be used for testing compliance and reviewing issues.

  •  Organise meeting with federation, eduGAIN Secretariat, eduGAIN BD and other relevant parties
  •  Add federation to edugain-discuss mailing list and eduGAIN Slack workspace
  •  Ensure a formal ticket is open for the federation application in OTRS
  •  Set up candidate profile on wiki to track progress

BD



Sec




Set up meeting within 2 weeks of receiving request


First meeting was held on 16/04/25

Step 2: Collect required information for membership application

There are a number of formalities that need to be addressed before a federation can become a membership candidate.  These are known as the "joining checklist" and represent the core information that is held about each federation to enable metadata consumption and to start the trust building process.


https://technical.edugain.org/joining_checklist

  •  Contact email
  •  Security contact
  •  Management contact
  •  
  • Metadata source
  •  Signing certificate
  •  Governance delegate and deputy
  •  Federation website
  •  Federation policy
  •  Federation MRPS
  •  Contact OT to add federation as a candidate on the eduGAIN website
Sec / OTTBD - depending on maturity of federation

Step 3: eduGAIN Secretariat review of federation documentation

The eduGAIN Secretariat will undertake an initial review of the federation Policy and MRPS documents and may invite others to help support this process.   The aim of this step is to help the federation identify any potential issues that might come up from the community review process and ensure step 5 goes as smoothly as possible.
  •  Undertake review of federation documentation
  •  Initial feedback from the eduGAIN Secretariat on documentation review
  •  Organise meeting to discuss feedback if appropriate

Sec


4 - 6 weeks
Step 4: Technical reviewThe purpose of the technical review is to iron out any issues the federation may have with publishing and consuming eduGAIN metadata on a daily basis to ensure that the federation can run successfully with no / low error rate when membership is approved.
  •  Work with OT to ensure certificate is correct
  •  Review of metadata against validator checks
  •  federation metadata should run with no errors for the period of time taken to complete the candidate assessment
Sec / OTConcurrent with Step 5 & 6
Step 5: membership review of federation documentationAs stated in the eduGAIN Constitution, the eduGAIN Steering Group (eSG) is responsible for: "Reviewing and approving the membership of new Federations". Step 5 and Step 6 support this requirement.
  •  Announce review on eduGAIN Steering Committee mailing list
  •  Invite comments to made on appropriate wiki page
  •  Run review process for a period of 4 weeks
Sec4 weeks (or 2-3 weeks for assessment + 1-2 weeks for the applicant to process the feedback?)
Step 6: votingFormalised vote for membership acceptance
  •  Prepare vote in Zeus
  •  Prepare voting record page on wiki
  •  Run vote for period of 2 weeks
Sec2 weeks
Step 7: formal registrationThis final step ensures that the candidate is able to fully utilise the eduGAIN service after the community vote is successful.
  •  Liaise with OT to sign declaration using eduSign
  •  Liaise with OT to update federation from candidate to member
  •  Add federation to edugain-
  • assembly mailing list
  •  Add federation to eduGAIN reporting tool
Sec

eduGAIN New Candidate Assessment Feedback

Policy: https://botsren.org.bw/wp-content/uploads/2025/04/Botswana-Identity-Federation-Policy.pdfindex.php/botswana-identity-federation/

MRPS: https://botsren.org.bw/wp-content/uploads/2025/04/Botswana-Identity-Federation-Metadata-Registration-Practice-Statement-MRPS.pdf

Metadata URL: https://federation.botsren.org.bw/metadata/botsren-federation-metadata.xml

Assessment Period: DATES

Comment #Document (Policy / MRPS)Document line / referenceProposed Change or QueryProposer / AffiliationReply Candidate
#1PolicySection 6: Legal conditions of useArticles on jurisdiction and dispute resolution, interfederation and amendments are missing (see REFEDS template).Casper Dreef (GÉANT)
#2PolicyGeneral commentThe policy seems to be minimalist compared to the REFEDS best practice policy template (for link, please see comment #1). Setting out the rights and responsibilities will provide clarity to all stakeholders.Casper Dreef (GÉANT)
#3PolicySection 2a. Governance

Examples of rights and responsibilities that are missing:
- Approving changes to the Federation Policy prepared by the Federation Operator.
- *enter which right* future directions and enhancements for the Federation together with the Federation Operator who prepares the plans.
- *enter which right* entering into interfederation agreement.

 Casper Dreef (GÉANT)
#4PolicySection 2b. Governance

Missing:
- Prepares and presents issues to the *governing body* and acts as the secretary of the *governing body* meetings.

Casper Dreef (GÉANT)
#5PolicySection 2c. Governance

"If a member acts as a home organization, it must: • Manage authentication credentials and digital identities." 
This sets low expectations from the federation member compared to the template.

Casper Dreef (GÉANT)
#6PolicySection 2c. Governance

"If a member functions as an attribute authority, it must: • Assign and maintain accurate attribute values." 
To whom?

Casper Dreef (GÉANT)
#7PolicySection 2c. Governance

"If a member operates as a service provider, it must: • Determine and enforce access rights for end users." 
Again an example of comment #2. 

Casper Dreef (GÉANT)
#8PolicySection 3: Eligibility

I assume that this section refers to https://botsren.org.bw/index.php/member/. The problem here is that these criteria don't take Service Providers into account.

Casper Dreef (GÉANT)
#9Policy

Section 5.b: Legal conditions of use

"The federation operator provides services on an "as-is" basis, with no liability for defects, losses, or damages."      In this in case the governing body can still be seen liable. 

Casper Dreef (GÉANT)
#10Policy

Section 5.b: Legal conditions of use

"Members assume responsibility for reliance on federation-provided information."
What does this mean?

Casper Dreef (GÉANT)
#11Policy

Section 5.b: Legal conditions of use

"Members cannot claim damages due to service interruptions or related issues."
What if the above occurs due to gross negligence? The bullet point above this statement states that "Liability exclusions apply except in cases of gross negligence or fraud."

Casper Dreef (GÉANT)
#12MRPS

Definitions and Terminology

I would recommend to stick closer to the terminology as used in MRPS template

Casper Dreef (GÉANT)
#13MRPS

Entity Eligibility and Validation

A subsection on Scope Format is missing.

Casper Dreef (GÉANT)
#14MRPS

Section 5.1

Include email address or add reference where the contact email address can be found.Casper Dreef (GÉANT)