You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 31 Next »

Participants

Proposers
NameOrganisation
GARR
GN4-3 project team
NameOrganisationRole
GARRP.I.
DFN-LRZScrum master, Member

Tamas Frank

KIFUDev
Sergio GómezRedirisDev
GEANT associationMember
Niels van DijkSURFNETMentor
Stakeholders
Name

Organisation

Role 
Davide VaghettiGARRGN4-3 eduGAIN service owner
Marco MalavoltiGARRGN4-3 Campus IdP Toolkit developer
 Janusz Ulanowski HEANet Initial / Occasional support for APIs

Activity Overview

Description

The GN4-2 project developed a solution to offer an IdP as a Service solution for hosted IdPs. This incubator investigates the business case of this solution to investigate how this solution could be made into a sustainable service offering.
When the incubator is finished, a business model for the provisioning of the GEANT IdP-a-a-S platform will be made available, defined in its fundamental parts. The business model will define for the IdP-a-a-s platform the following key points:

  1. Added value of the IdP-a-a-S platform with respect to the current provisioninig model for Identity providers in eduGAIN / GEANT community
  2. What will be the provided product: Deployment model and service provisioning scenario, after identification of the service target users
  3. Key benefits for : a) End Users b) Individual Home Institutions IdP managers c) Federation operators
  4. Product Service deployment requirements and service lifecycle management
  5. Raugh estimate of the costs to provide the service

In addition to the business model, the Incubator IdP-a-a-S task will work to consolidate the current provided GN4-2 platform, with the aim of:

  1. Add a set of minimal required functionaliy to make the product consistent and attractve for target users
    1. Add to the current "spawn new IdP" functionality also the "IdP management/Configuration updates" functionality
    2. Make the platform an eduGAIN Service Provider accessible via federated credentials
    3. Add the necessary hooks to onboard Home Organization IdP admins ( without federated credentials available initially)
  2. Consolidate the product in terms of robustness, testing, stress testing, scalability
  3. Package the product to ease the deployment
  4. Integrate the platform with the required additional services to support a reasonable and concrete deployment scenario
  5. Document the service for
    1. End Users
    2. Service Providers
    3. Service Maintainers

Also, given the option to adopt a full fledged developed solution made available by the SAMLIDP.IO company, this task will assess the possibility to endorse this platform, further developing it where/if needed, and bless it as the provided solution as an alternative to the GN4-2 Campus IdP platform.

Goals


  • It develops an initial (crude but working) demo of the service
  • Defines target audience and collects target audience
  • Collects requirements from target audience
  • Provides all basic required functionality
  • Gathers initial feedback from potential users
  • Paves the way towards PLM cycles if required
  • Contributes to validating associated cost model

Activity Details

Technical details

Technologies P1 : Ansible, JavaScript, Node.js, React, Python

Technologies P2: Simphony, SimpleSAMLphp

P1 Architecture Overview Document: https://docs.google.com/document/d/1ho3WClfRVJ5sjUDqskmjBDSKpvPPoL6vlUXfcHGXKRA/edit#

P2 Architecture Overview Document: http://bit.ly/samlidpio-arch (including further developments)

New required/desirable features for the Campus IdP platform: https://goo.gl/GH7J2D

Business case

The business cases is based on an initial survey for NRENs on (cloud) IdP solutions conducted in GN4-2 (IdP_NREN_Survey.pdf).


Data protection & Privacy
  • Compliance to the GEANT CoCo GDPR related Entity Category should ensure compliance to EU Regulation on Data Protection ( EU GDPR) for the operators of this product.
  • The product by itself should implement commonly agreed technical solutions to ensure security, privacy and data protection.


Definition of Done (DoD)

This activity is successfully finished when:

  • A Minimal viable product definition for the IdP as a service offering is created
  • The MVP has been discussed and validated with the community
  • An analysis is made and reported around the business case for delivering a solution for IdP as a Servcie
  • A working prototype is made available for installation by an NREN


Sustainability

The aim of the incubator is to come up with a deploy-able solution for NRENs
The software product(s) may be further developed with a community of NRENs using the product, potentially with support of the GEANT project

Activity Results

Results
Please provide pointers to completed and intermediary results of this activity

Meetings

Date

Activity

Owner

Minutes

February 6, 2019

Kickoff meeting

 Michael SchmidtIdP service kick off.pdf
 March 29, 2019 Minutes Alan Lewis
 April 04 2019 Minutes Alan Lewis








Documents

(Attach any documents to this page to get them listed.)

No files shared here yet.



  • No labels