...
| Title | Investigate and test privacy enhancing technologies |
|---|---|
| Description | During REFEDs at TechEx2017,and later-on during TechEx2017 itself, a interesting discussions developed over the future of federation, the role of users and the use/rise of proxy technology. This activity investigates and showcases privacy enhancing technologies including, but not limited to, PEP (Polymorphic Encryption Pseudonyms) (1) and IRMA (I reveal my attributes) (2) and tests and validates applicability and usecases of these in the context of R&E federations and eduGAIN.
|
| Proposer | Niels van Dijk, SURFnet |
| Resource requirements |
|
| +1's | (SURFnet) |
| References | (1) https://blog.surf.nl/en/privacy-surfconext-using-polymorphic-pseudonyms/ |
| Title | Two Factor (something) |
|---|---|
| Description |
|
| Proposer | From data gathering exercise |
| Resource requirements | <money? effort? coordination? infrastructure?> |
| +1's | <for others to voice their support - add your name here> |
| -1's | Wolfgang Pempe, DFN: I believe this is out of scope for GÉANT, you would need a dedicated organization for that purpose |
update SAML tracer - get this done in GN4-2 | |
| Description | The SAML Tracer (https://addons.mozilla.org/nl/firefox/addon/saml-tracer/) is a highly rated firefox plugin which was developed in our community (UNINETT, with contributions from others). As the browser is the central entity in any SAML transaction, it is extremely convenient tool for testing en debugging SAML transactions. There are not many alternatives to this tool Unfortunately, Firefox has changed its plugin framework, rendering the existig plugin useless and a major rework is needed. |
| Proposer | Niels van Dijk, SURFnet |
| Resource requirements | Money, a (junior) developer |
| +1's | Stefan Winter Scott Koranda, LIGO Nick Roy, InCommon Thomas Lenggenhager, SWITCH:Feasibility to provide also a version for Safari compatible version? Thanks José Manuel, I now found the SAML Chrome Panel! Pieter van der Meulen (SURFnet) Michael Domingues (University of Iowa) José Manuel, RedIRIS/SIR. Regarding Thomas question, there's a SAML Chome Panel extension for Chrome Wolfgang Pempe, DFN MIchael Brogan (University of Washington) Nate Klingenstein (The California State University) Marcus Mizushima (The California State University) Andrew Morgan (Oregon State University) David Bantz (U Alaska) Brent Putman (Georgetown University, Shibboleth Developer Team) Liam |
| Title | update SAML tracer - get this done in GN4-2 |
| Description | The SAML Tracer (https://addons.mozilla.org/nl/firefox/addon/saml-tracer/) is a highly rated firefox plugin which was developed in our community (UNINETT, with contributions from others). As the browser is the central entity in any SAML transaction, it is extremely convenient tool for testing en debugging SAML transactions. There are not many alternatives to this tool Unfortunately, Firefox has changed its plugin framework, rendering the existig plugin useless and a major rework is needed. |
| Proposer | Niels van Dijk, SURFnet |
| Resource requirements | Money, a (junior) developer |
| +1's | Stefan Winter Scott Koranda, LIGO Nick Roy, InCommon Thomas Lenggenhager, SWITCH:Feasibility to provide also a version for Safari compatible version? Thanks José Manuel, I now found the SAML Chrome Panel! Pieter van der Meulen (SURFnet) Michael Domingues (University of Iowa) José Manuel, RedIRIS/SIR. Regarding Thomas question, there's a SAML Chome Panel extension for Chrome Wolfgang Pempe, DFN MIchael Brogan (University of Washington) Nate Klingenstein (The California State University) Marcus Mizushima (The California State University) Andrew Morgan (Oregon State University) David Bantz (U Alaska) Brent Putman (Georgetown University, Shibboleth Developer Team) Liam Hoekenga (University of Michigan) Terry Smith (AAF) Dalia Abraham (AAF) Daniel Lutz (SWITCH) Etienne Dysli Metref (SWITCH) Martin Haase (DAASI) Rod Widdowson (Steading System Software, Shibboleth Developer Team) Allan West (University of Florida) Dominique Petitpierre (University of Geneva) Cédric BRINER (University of Geneva) Eric Yurick (Gettysburg College) Vlad Mencl (Tuakiri/REANNZ) |
Above and Below eduGAIN (inc. eScience requirements driven activities)
eduTEAMs Related
| Title | Placeholder to include (and potentially continue) some of AARC work |
|---|---|
| Description | I would like to have a placeholder to include work that my be triggered by the revisited list of FIM4R requirements, as well as by AARC. Furthermore, I'd also like to include in this box liaisons with EOSC hub concerning their T&I architecture developments and adoption/support of FIM technologies. This item cannot and should not be more specific than this at this point in time. |
| Proposer | Licia Florio |
| Resource requirements | Coordination work, resources |
| +1's | <for others to voice their support - add your name here> |
| Title | eduTEAMS enhancements |
|---|---|
| Description | eduTEAMS work is progressing; there are different options for deploying eduTEAMS. This work item looks at the requirements for eduTEAMS when used by eScience collaborations. There will be lessons learned after the pilot with the life science community. I propose we have a placeholder so work on this does not go off radar during the planning. |
| Proposer | Licia Florio |
| Resource requirements | Effort mostly |
| +1's | <for others to voice their support - add your name here> |
| Title | Discovery for Attribute Authorities (AAs) |
|---|---|
| Description | Users can select their IdP via discovery, therefore the SP can potentially receive users from thousands of IdPs. There is no such facility for AA-s however, meaning that SP-s need to hard-configure which AAs they query. Also, query all the configured AAs for all users all the time. In GN4-1-JRA3-T1 it has been established that this is a serious bottleneck, as maximum 2-3 AAs can be queried without breaking the entire login session. A better approach is needed. The SPs need to query AAs selectively, based on either user input or some alternative means, like some VO lookup service. Otherwise all SPs will just stick with the biggest AAs like eduTEAMS basic membership service or hexaa.eduid.hu and not query alternative entities, making single-tenant AAs very unattractive. |
| Proposer | Mihály Héder |
| Resource requirements | This is a hard one. Currently there is no support for any elements of this whatsoever
| +1's | Constantin Sclifos, RENAM
Otherwise all SPs will just stick with the biggest AAs like eduTEAMS basic membership service or hexaa.eduid.hu and not query alternative entities, making single-tenant AAs very unattractive. | |
| Proposer | Mihály Héder |
| Resource requirements | This is a hard one. Currently there is no support for any elements of this whatsoever
|
| +1's | Constantin Sclifos, RENAM |
| -1's | Wolfgang Pempe, DFN: Such a dynamic approach would raise issues concerning trust and privacy. An attribute authority must be in control of the list of SPs that are entitled to perform attribute queries and (possibly) recieve PII. |
StepUp
| Title | Two Factor (something) |
|---|---|
| Description |
|
| Proposer | From data gathering exercise |
| Resource requirements | <money? effort? coordination? infrastructure?> |
| +1's | <for others to voice their support - add your name here> |
| -1's | Wolfgang Pempe, DFN: |
| I believe this is out of scope for GÉANT, you would need a dedicated organization for that purpose |
| Title | eduTEAMS and guest IdPs |
|---|---|
| Description | eduTEAMS and guest IdPs - use-cases: need to support social IDs and guest IdP, but it need additional LoA. Step up authN as a service is in the plan |
| Proposer | from data gathering exercise |
| Resource requirements | <money? effort? coordination? infrastructure?> |
| +1's | isn't this the work being done in IoLR +REFEDS? |
...