Document structure
OT tasks
Management of core eduGAIN services
Supervision of eduGAIN joining process
Management or supervision of supplementary eduGAIN services
OT procedures
members registering or changing information
introduction of new eduGAIN metadata requirements
introduction of new good practices for metadata
handling of system alerts
system updates
software development, testing and production implementation
backup
monitoring
Core services
Suplementarny services
Service Order
Problem resolution
Configuration change
System update
Backup
Disaster recovery
members registering or changing information
in eduGAIN SAML Profile requires that the members provide the information:
Registration and modification of federation information
| information type | registration level | security level |
|---|---|---|
federation delegate to eduGAIN SG | eduGAIN | S |
| federation delegate deputy to eduGAIN SG | eduGAIN | S |
| federation page URL | eduGAIN | 1 |
| federation mail contact | eduGAIN | 2 |
| federation SAML policy URL | SAML | 1 |
registration practice statement URL | SAML | 1 |
federation SAML metadata aggregate access URL | SAML | 3 |
federation metadata signing key | SAML | 4 |
| registrationAuthority attribute value | SAML | 3 |
Federation delegate and deputy are the only federation representatives authorized to submit information, therefore their identity needs to be established in a trusted way, this is however part of the global eduGAIN trust model, not specific to the SAML prifile.
Security levels
| security level | description |
|---|---|
| S | special - delegating representatives requires contact with the federation management |
| 1 | informational, not requiring special vetting |
| 2 | important contact information |
| 3 | information of eduGAIN operational relevance, requires special care |
| 4 | crucial for eduGAIN trust, requires utmost care |