This page describes the current practice of federations with regard to upstream and downstream metadata publication. Additional information and a recommendation how to best handle local/eduGAIN metadata for a SAML-based identity federation can also be found on Best Current Practices on Joining eduGAIN. (page in Federation, update link)
Upstream Approaches:
- Full Opt-in.
- Full Opt-out.
- IdP Opt-in, SP Opt-Out.
- IdP Opt-out, SP Opt-in (Recommended)
...
- Everything in local feed.
- Choose local or local+interfederation.
- Separate1 (all).
- Seperate2 (IdP, SP).
- Separate3 (all,IdP, SP).
- Consume directly from MDS. (Not recommended!)
- Custom.
| Table Filter |
|---|
| id | 1595324263800_929552149 |
|---|
|
| Federation | Upstream | Downstream | Armenia | Full Opt-Out | | | Austria - eduID.at/ACOnet Identity Federation | Full Opt-In | Entities choose either local or local+interfed feed | | Australia | Full Opt-In | | | Belarus | ?? | | | Belgium - Belnet Federation | Full Opt-In | Entities consume the MDS metadata directly | | Brazil - CaFe | Full Opt-In | Entities consume the MDS metadata directly | | Canada - Canadian Access Federation | Full Opt-In | Imported entities in a separate aggregate (all) | | Chile - COFRe | Full Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | Colombia - COLFIRE | Full Opt-In | Entities consume the MDS metadata directly | | Croatia - AAI@EduHr | IdP Opt-Out, SP Opt-In | Imported entities in main (local) aggregate | | Czech Republic - eduID.cz | Full Opt-In | Entities choose either local or local+interfed feed | | Denmark - WAYF | IdP Opt-In, SP Opt-Out | Currently working on new approach | | Ecuador - MINGA | Full Opt-In | Entities consume the MDS metadata directly | | Estonia - TAAT | Full Opt-In | Imported entities in 3 separate aggregates (all, SP, IdP) | | Finland - HAKA | Full Opt-In | custom metadata per entity | France - Fédération Éducation-Recherche | IdP Opt-Out, SP Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | Georgia - Grena Identity Federation | Full Opt-In | unknown | | Germany - DFN | Full Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | Greece - GRNET! | Full Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | Hungary - eduId.hu | Full Opt-In | Imported entities in a separate aggregate (all) | | India | IdP Opt-Out, SP Opt-In | | | Ireland - Edugate | Full Opt-In | custom metadata per entity | | Israel - IUCC Identity Federation | Full Opt-In | Entities consume the MDS metadata directly | | Italy - IDEM | IdP Opt-Out, SP Opt-In | Imported entities in a separate aggregate (all) | | Japan - GakuNin | Full Opt-In | unknown | | Korea | Full Opt-In | | | Latvia - LAIFE | Full Opt-In | Imported entities in 3 separate aggregates (all, SP, IdP) | | Lithuania - LITNET FEDI | Full Opt-In | Imported entities in 3 separate aggregates (all, SP, IdP) | | Luxembourg - eduID Luxembourg | Full Opt-In | unknown | | Macedonia | Full Opt-Out | | | Moldova | Full Opt-Out | | | Norway - FEIDE | Full Opt-In | Imported entities in a separate aggregate (all) | | Poland - PIONIER.Id | Full Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | Portugal - RCTSaai | Full Opt-In | unknown | | Slovenia - ArnesAAI | Full Opt-In | Imported entities into 2 separate aggregates (SP, IdP) | | South Africa - SAFIRE | IdP Opt-Out, SP Opt-In | Imported entities in a separate aggregate (IdP) | | Spain - SIR | Full Opt-In | Entities consume the MDS metadata directly IdPs have custom feeds built | | Sweden - SWAMID | IdP Opt-Out, SP Opt-In | Imported entities in main aggregate | | Switzerland - SWITCHaai | Full Opt-In | Local feed + imported entities in 2 separate aggregates (SP, IdP) | | The Netherlands - SURFconext | Full Opt-In | eduGAIN SPs need to be separately onboarded | | U.S. - InCommon | IdP Opt-Out, SP Opt-In | Imported entities in main (local) aggregate | | Ukraine - PEANO | Full Opt-In | Imported entities in a separate aggregate (all) | | United Kingdom - UK federation | Full Opt-Out (IdP and SP) | Imported entities in main (local) aggregate |
|