Summary

This document provides guidelines for expressing Community User Identifiers (CUIDs) such that the identifier values can be transported in an interoperable way across AARC Blueprint Architecture (BPA) compliant Authentication & Authorisation Infrastructures (AAIs). The CUID is a subject identifier, where the subjects are generally but not exclusively natural persons. The community user identifier is an attribute of the subject’s digital identity which is managed by the Community AAI. The guidelines specify how the CUID is communicated from the Community AAI to its connected services, i.e. infrastructure services (accessible through Infrastructure Proxies), generic and community services

Guidelines for uniquely identifying users across infrastructures

Summary

A variety of different user identifiers in different formats is used by research infrastructures and e-infrastructures for the identification of users. The goal of this document is to define how the user identifiers should be shared between infrastructures in order to cope with the inconsistencies in user identification practises. To this end, the document provides guidelines for expressing the identifier of a user for cross-infrastructure access to resources. It should be noted that the identification of users within the boundaries of a given infrastructure is out of scope of this document.

Links

Working docs

https://docs.google.com/document/d/1QPtKz49cFbQsykbx_jUMj806Aiq-yPaoltl9HXcxNs8/edit#

Final PDF

To be published

Meetings schedule and Minutes