Research communities have a need to express and potentially share certain trust marks on IdPs and SPs. These trust marks may differ from exiting existing trust marks issued by identity federations, or . They may be put in used to compliment existing ones, in case the federation operator does not support these, particular trust marks like e.g. in the case of SIRTFISirtfi.

This project activity tries to implement a technical solution that matches the requirements as described by the SIRTFI Sirtfi community and investigates usability of the solution for research communities and the impact of the solution of Identity federationsto the identity federations. It also explores potential other scenarios where a similar methodology could be used, like e.g. REFEDS MFA and in the context of the IdP self assessment tool that was developed in GN4-2.

Out of scope for this activity are the questions about where and how such a tool would be used in the context of existing trust frameworks.

Activity goals

Please describe the goals of pilot, including activities, participants, the community(ies) that require a solution. Describe when the pilot is done and how to measure the success of it, in a SMART way.

<Enter here>

:

• Create technical implementation based on Sirtfi + Registry requirements;
• Distill technical requirements from Sirtfi + Registry requirements;
• Create/Describe technical design;
• Buy or build (or modify existing);
• Improve trough sprint iterations;
• Interact with Sirtfi working group to improve features if needed;
• Learn and discuss flows and usability in ‘real world’ (Collaborate with LIGO);
• Deploy working setup so it can be tested with stakeholdersv
• Explore and describe (& implement) authZ architecture in collaboration w/ Sirtfi working group.

What is the business case for this Incubator project? Who would be customers of this solution and what would potential business case look like?

<Enter here>

The current plan is to test the implementation, and to determine whether the trust model is satisfactory. Potentially, potential applications of the solution may extend the current Sirtfi+ use case.

How do data protection and privacy impact this Incubator project? Think about With the federated access and adhering to basic principles of federated identity management (following DPCoCoV2 and, e.g. handling , applicable AARC guidelines), no new issues regarding processing of personal data of users
are foreseen.

When this Incubator project is completed, do you intend to continue using the solution? If yes, can you describe how you intent to sustain it? (E.g. through own staff, by using an e-Infrastructure provider, ...)

<Enter here>