Minutes

Only specific points raised and queries are minuted - see slides for what is presented.

Session 1: Planning Reports

Task 1 - Campus and Fed

Campus IdP Challenges - non technical, process and business challenges.

• Experience from FaaS - the trust relationship between the campus and GÉANT is a gap.
• Scope - IdP or IDM?
• Link to eduroam-as-a-Service.
• Sustainability
• What do established federations benefit from this?

SIRTFI Challenges

• Coordination with several bodies - AARC, GÉANT, REFEDS.
• How to get high coverage without 'mandatory' which results in expulsion from eduGAIN.

Task 2 - Research & SP

e-Science Support

• Use existing OTRS/ticketing system and escalation concepts
• REFEDs also able to feed it in
• Think about scaling the support depending on user types.
• eduroam used scripts to direct queries too

Assurance

• Needs some refining on workplan decisions
• Lots of options, not clear info
• VO PaaS requires some assurance info - good location for the tool as a context provider.
• Suggest working on improving federation documentation in this field.
• Who implements the tool? AARC or GÉANT? (We have budget and dev)

Additional work items

• Various check tools nearly all have connections with other tasks
• wiki.edugain.org - should this move to new wiki system?
• TODO - reusing information from the wiki to be real support docs for different target users

Task 3 - TrustTech

User centric ID

• Question - is there a link between user centric ID and Campus IdP - should small countries jump straight to user-centric if they don't have a footprint? M18 should trigger a decision?

MFA

• MFA service in VO context? (Surfnet model)
• Who 'triggers' the requirement? SP, IdP, User?
• Beware vendor lock-in.

Mobile

• Gap - mobile phone usability for IdP dialog windows
• ECP?

Cross sector

• Link with VO PaaS
• SaToSa aspects are only once VOPaaS is complete with it's development of it

Task 4 - eduroam

• Links with campus IdP
• Silver bullet - how monolithic should the components be?
• Security of information, trust.
• Mobile expertise cross-usable in T3?

Session 2: Business Development

• Support NRENs deploying stuff
• FaaS - registry as a service. Can we go beyond it?
• New users are outside Europe
• Cost model?
• Priority - 
  • Get our house in order - focus on improving the performance of eduGAIN - R&S etc.
  • Work with Partner relations on NREN engagement - e.g. 'only two of your IdPs support xxx, what can we do to help and International on outside Europe
  • Focus on business models (inc. outside geant costs)
    • eduGAIN/FaaS -> USPs are Hosted registry & signing 
    • eduroam IdP as a Service
    • InAcademia
    • VO PaaS
• On international, keep us informed of what happens on that scale
• Portfolio for organization sync'd with project portfolio
• We need a CRM!

KPIs - need to be real, useful and we may need to develop tools to capture them. Go beyond the EC contract.

Session 3: Monitoring

• Discussion on where should tools be hosted
  •  technical.eduGAIN for eduGAIN stuff
  • MET and fedlab stay separately in their scopes
  • REFEDs already has an info page on existing tools, linking to those
  • How do we promote this?
• Do we need official GEANT training on the checking and monitoring tools that are available?
  • Train federations
  • Get it included in the AARC training!!!
  • Then get the AARC training to the IdPs.
• Blog posts/features
• http://jusp.mimas.ac.uk/ - agreements for sharing of accounting stats with SPs

Session 4: Operations

• Would like to do usability testing but do not have enough skilled people currently.
• Dev teams would like to do validation early as possible
• Give input on what people are actually doing to define process.
• How to handle dependent code not developed in house
• Allow 2 months to transition a new service
• How to apply agile dev to the split ops model?
• Very important to document current ways of working before considering any change
• Budget your support load in the CBA
• Provide info on default security and DP considerations for pilot and production.
• Use the ops docs as a sanity checklist during development - link to CBA too. Influence design with ops concepts early
• Provide OLA/SLA targets.

Session 5: Breakouts

• Need more outreach 
• Assurance profile for MFA
• Gamification of Science support - quadrant of R&S, CoCo, SIRTFI, MFA
• Outreach - IAMonline - develop campus contacts

-----------------------

• Distinguish between full services and incremental improvements in handover
• SA should provide design guidelines & templates or technical.edugain.org - started work (Robert Latta)
• Need to understand the role of e-science support - is it L2 or consultancy?
• Start organizing support behind the scenes before service is scoped.
• How to handle the 'ad hoc' support which goes to various mailing lists?

---------------------

• letsradsec needs access to the ops data - raw db access.
• self-service diagnostic needs ops data and more frequent checks for realtime diagnostics
• need to benchmark the performance implications of on demand tests against the production system
• need a spec and reporting format for probes data. f-ticks as it stands isn't quite suitable, and it isn't easily extensible to this case. JSON is of interest but TCP is an issue.

Action items

• Nicole Harris Investigate a campus group/SIG for fed id - ask federations for nominations from their own AAI advisory groups
• Brook Schofield Develop Business Development strategy & OKRs based on priorities
• Ann HardingMarina Adomeit Check with Toby Rodwell on use of OTRS in late stage pilots
•  Niels van Dijk Populate service template for InAcademia
• Justin Knight Push Shib Consortium for tracking upgrades to Shib IdP v3 
• Nicole Harris work with AARC/REFEDs for collab funding/content for IAMOnline Europe. All, provide input. Brook Schofield arrange regular eduGAIN SG meetings between IAMOnlines
  
• Nicole Harris to carry out review of baseline fed ops and work with federations on gaps.
• Justin Knight Help Brook arrange business dev training workshop
  
• Daniela Pöhn MFA options analysis / appraisal across commercial (procurement?), open source etc. 
  
• Tomasz Wolniewicz to add SIRTFI monitoring to technical.edugain.org.  
• Daniela Pöhn Lukas Hämmerle Compare policies with baseline requirements
• Daniela PöhnLukas Hämmerle "Create" gamification of SIRTFI, R&S, CoCo, MFA, some sort of assurance level (name?)
  
• Daniela Pöhn, Nicole Harris Baseline practice statements review/survey of state
  
• Tomasz Wolniewicz Run webinar for developers on the eduGAIN DB/backend and use of the APIs (also publish APIs)
  
• Marina Adomeit Deploy ticketing for L1/L2 eduGAIN now:) - need a spec:)
  
• Justin Knight, Ann Harding Schedule a group meeting on all the as-a-service flavors, include some non project NRENs who do similar.
  
• Niels van Dijk, Mandeep Saini Investigate the value of adding the AARC Assurance self-assessment tool to VOPaaS