Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Participants

...

Panel
titleContact dataProposers


NameOrganisation
SURFnet



Please provide contact details for
Panel
title
GN4-3 project team


participants involved in this activity
 
Name
Email
OrganisationRole
Submitter name & email:
P.I.Other participants
SURFnetPI
DFN-LRZScrum master
...

Mihály Héder

KIFUMember
RASH
 
Dev
...
Vangjel StavroRASHDev
...
GEANT AssociationMentor




Please provide names and contact details for additional (external) organisations involved in this Incubator project

Panel
titleContact data of Parties involved
Organisation Name
Person names
Person emailRole within pilot

 ORCID

 Laura Peglione       
Stakeholders


Name

Organisation

Role 
Laura Paglione on behalf of ORCIDORCID ORCID contact person
Christos KanellopoulosGEANT AssociationeduTEAMS Service Owner


Activity Overview

Panel
titleDescription

Many research collaborations as well as campus services need a solution to deal with guest identity, as in many cases not all users are members of the academic Identity Federations. As a result several federation operators as well as research collaborations operate IdPs or proxies to allow users to authenticate trough external identity providers like social ones. THis This has lead to serious reinventing of the the wheel. The need for guest identities burdens the SPs with the integration costs and along the way may force guest users to use specific IdPs as implemented by the SP, which they may not want or may not be able to use, only because the SP decided only to implement a few of these solutions. In the GN4-2 project a first pilot was run as part of the eduTEAMS activity to investigate if a centralized service could be offered to resolve these issues. This resulted in solution named IDhub that uses SaToSa product. The aim of eduTEAMS service this solution was to resolve these issues by providing a solution that is technically alike any other IdP in edUGAIN eduGAIN so the integration cost is reduced to zero,   and offers offer multiple IdPs so the guest users may choose what they want/can to use.

This pilot aims to bring ORCID into the IDhub solution, with formal support from ORCID(SaToSa) solution. It also investigates the (technical) improvements needed to better scale the IDhub solution and will begin a dialog with the service activities to make the pilot move towards a full service offering under the GEANT umbrella.IDhub. At the same time it will investigate the requirements to be able to offer such a service with formal support from ORCID. 


Panel
titlePilot goalsGoals

Please describe the goals of pilot, including activities, participants, the community(ies) that require a solution. Describe when the pilot is done and how to measure the success of it, in a SMART way.

<Enter here>

...

  • Implement the ORCID member API into IDhub (SaToSa)
  • Identify requirements and issues that would prevent GEANT from operating this as a service

Activity Details

Panel
titleTechnical details

Please describe the technical details for this pilot.

<Enter here>

Technically this is an application of SaToSa where the south side is a SAML IdP exposed to GEANT or other SAML federations the north side is ORCID API, which is based on OAuth.


Panel
titleBusiness case

What is the business case for this Incubator project? Who would be customers of this solution and what would potential business case look like?

<Enter here>

It is assumed this service can be maintained at low cost and enhances the appeal of eduTEAMS and eduGAIN, and at the same time it creates a good relationship with ORCID.


Panel
titleData protection & Privacy

How do data protection and privacy impact this Incubator project? Think about e.g. handling of personal data of users

<Enter here>Users personal data will be processed when the data will be handled from ORCID into the SAML side, therefore a data protection policy about how this data is handled needs to be defined.


Panel
titleSustainability

When this Incubator project is completed, do you intend to continue using the solution? If yes, can you describe how you intent to sustain it? (E.g. through own staff, by using an e-Infrastructure provider, ...)

<Enter here>

Meetings

...

Date

...

Activity

...

Owner

...

January 1, 2017

...

Kickoff meeting

...

Definition of Done (DoD)

The project is finished when:

  • ORCID API can be used for authentication in the IDhub (SaToSa)
  • requirements and issues have been identified that would prevent GEANT project form offering such an IdP into eduGAIN


Panel
titleSustainability
The intent is to initially offer this as part of eduTEAMS

Activity Results

Panel
titleResults
See documents provided below.

Meetings

Date

Activity

Owner

Minutes

February 19, 2019

Kickoff meeting


 ORCID kick off.pdf
















Documents

ORCID IdP as a Last Resource Business Case Analysis

Attachments

Documents

(Attach any documents to this page to get them listed.)