eduGAIN Compliance Issues

SAML Profile (8)

Issue	Federations	Count	Notes
No issues	DZ, AU, AT, BY, BR, CA, HR,CZ, EC, EE, GE, DE, IN, HU, KR, LV, LT, LU, MD, NO, RU, PL, SG, ZA, ES, UA, CH, NL \|\| UK, FR, SI, SE \|\| OM \|\| MY, RU, MA, MZ CO \|\| HK IR IE GR BE IT \|\| JP AM фEDUrus \|\| PKIFED \|\| US \|\| UG MK TR ZM OMREN	48	UK fixed errors in June FR,SI, SE fixed errors in July OM checked and passed July MY, RU, MA, MZ checked and passed in August HK, IE GR BE, IR and IT checked and passed in September JP AM фEDUrus checked and passed in October PKIFED checked and passed in November US checked and passed in December. UG, MK, TR, ZM, OMREN checked and passed in February.
EntitiesDescriptor does not contain PublicationInfo	AR, FI, PT	3	IE resolved publication issue in July
Missing an "English" value in Metadata	-	0	FR resolved in July JP resolved in October AM resolved in October
mdui:Logo has wrong value	-	0
Signature using an Empty Reference		1	FR resolved in July
validaUntil is less than 5 or greater than 28 from creationInstant		0	CO and IL resolved issues in July
creationInstant wrong / in the future	CL	1	FR resolved issues in July SI resolved issues in July IR resolved in September HK resolved issues in September MK resolved in February.
Signature Method/Digest Weak	CL	1
Organization block / ContactPerson not found or missing tech/support	DK	1	SE resolved in July GR resolved in September. JP resolved in October. MK resolved in February.
Not checked / new		0	MA + MZ added in August No new federations in September ZM, OM2 & фEDUrus added in October TR started participating in February

SAML Profile: Warnings (49)

Be a great federation participant and even fix the rough edges.

Issue	Federations	Count	Notes
No issues	COLFIRE IR Fed SIFULAN SAFIRE фEDUrus PKIFED	6
To be assessed	MATE WAYF HAKA KAFE AAIEduMk InCommon	6
Expired signing/encryption certificate	ARNaai AAF CAF FÉR GRNET-AAI Edugate IDEM LAIFE FEIDE RCTSaai PIONIER.Id SGAF SIR ArnesAAI SWAMID	15
Some SPs don't provide requested attributes	AFIRE eduID.cz GIF GRNET-AAI eduIDM.ma RUNNET AAI SIR SWAMID SURFconext UK Federation	10	SPs that only require AuthN don't need attributes
No Logo Element	AAF BelnetAAI CAF CAFe COFRe AAI@EduHr eduID.cz TAAT FÉR DFN AAI GRNET-AAI HKAF eduID.hu Edugate GakuNin IDEM LAIFE eduIDM.ma LEAF FEIDE RCTSaai PIONIER.Id RUNNET AAI SGAF SIR ArnesAAI SWITCHaai SWAMID RIF PEANO UK Federation CAF-Moz	32
EmailAddress w/o mailto:	BelnetAAI CAFe COFRe AAI@EduHr eduID.cz MINGA IIF eduID Luxembourg FEIDE RUNNET AAI SIR SWAMID CAF-Moz	13
Some entities w/o encryption certificate	FEIDE UK Federation	2	Validator had a bug (now fixed) that caused a large number of false positives
Registration Policy not found	ACOnet-AAI FEBAS CAF KAFE LITNET FEDI LEAF Oman KID RCTSaai RIF UK Federation	10
DisplayName/Description missing	GIF SURFconext UK Federation	3
CoCo declared w/o RequestedAttributes	SURFconext	1

SAML Profile: 3k signing key (3)

New federation members have to use a 3k key - but how is the rest of the community doing?

Issue	Federations	Count	Notes
New Member	FIDERN PKIFED	2	Needs to upgrade to 3k key or better for 1st import of metadata
ECC		-
4k	AFIRE COLFIRE COFRe MINGA GIF DFN AAI INFED eduID Luxembourg LITNET FEDI LAIFE AAIEduMk RUNNET AAI ArnesAAI SWAMID фEDUrus Omren Fed SIFULAN	16
3k	CAF-Moz	1
To be assessed	GrIdP	1	Metadata Invalid
~~2k+8~~	~~SIFULAN~~	1	~~This might be a mistake!~~
2k	ARNaai MATE AAF BelnetAAI ACOnet-AAI FEBAS CAFe CAF AAI@EduHr eduID.cz WAYF TAAT HAKA FÉR GRNET-AAI HKAF eduID.hu Edugate IIF IR Fed IDEM GakuNin KAFE eduIDM.ma LEAF FEIDE Oman KID PIONIER.Id RCTSaai SGAF SIR SAFIRE SWITCHaai SURFconext RIF InCommon PEANO UK Federation	38	There is no requirement for existing federation members to "upgrade".

MRPS (62)

The template is available at: https://github.com/REFEDS/MRPS/blob/master/mrps.md. Federations will be asked to follow this template or declare that they cover the areas described in the template.

Federation	MRPS Exists	MRPS Based on Template	Decision
Algeria/ARNaai	YES	YES	Meets requirements
Argentina/MATE	YES	YES	Meets requirements
Armenia/AFIRE	YES	YES	Meets requirements
Australia/AAF	YES	YES	Meets requirements
Austria/ACOnet Identity Federation	YES	YES	Meets requirements
Belarus/FEBAS	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Belgium/Belnet Federation	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Brazil/CAFe	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Bulgaria/BIF	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Canada/Canada Access Federation	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Chile/COFRe	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Colombia/COLFIRE	YES	YES	Meets requirements
Croatia/AAI@EduHr	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Cyprus/CyNet Identity Federation	YES	YES	Meets requirements
Czech Republic/eduID.cz	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Denmark/WAYF	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Ecuador/MINGA	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Estonia/TAAT	YES	YES	Meets requirements
Finland/HAKA	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
France/Fédération Éducation-Recherche	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
Georgia/Grena Identity Federation	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Germany/DFN AAI	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Greece/GRNET	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Hong Kong/HKAF	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Hungary/eduId.hu	NO	NO	Ask to be reviewed and put in place by 1st April 2019
India/INFED	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Iran/IR Fed	YES	YES	Meets requirements
Ireland/Edugate	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Israel/IUCC Identity Federation	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Italy/Grid Identity Pool	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Italy/IDEM	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Japan/GakuNin	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Korea/KAFE	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Latvia/LAIFE	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Lithuania/LITNET FEDI	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Luxembourg/eduID Luxembourg	YES	YES	Meets requirements
Macedonia/AAIEduMk	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Malaysia / SIFULAN	YES	YES	Meets requirements
Moldova/LEAF	YES	YES	Meets requirements
Morocco/eduIDM.ma
Mozambique/CAFMoz
New Zealand/Tuakiri New Zealand Access Federation	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Norway/FEIDE	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Oman/Oman KID	YES	YES	Meets requirements
Pakistan/PKIFED	YES	YES	Meets requirements
Poland/PIONIER.Id	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Portugal/RCTSaai	NO	NO	Ask to be reviewed and put in place by 1st April 2019
Russia - RUNNET AAI
Russia / FEDURUS
Singapore/Singapore Access Federation - SGAF	YES	YES	Meets requirements
Slovenia/ArnesAAI Slovenska izobrazecalno raziskovalna federacija	NO	NO	Ask to be reviewed and put in place by 1st April 2019
South Africa/SAFIRE	YES	YES	Meets requirements
Spain/SIR	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Sweden/SWAMID	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Switzerland/SWITCHaai	YES	YES	Meets requirements
The Netherlands/SURFconext	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Turkey/YETKIM	NO	N/A	Ask to be reviewed and put in place by 1st April 2019
U.S./InCommon	YES	NO	Ask to be reviewed and put in place by 1st April 2019
Uganda/RIF	YES	YES	Meets requirements
Ukraine/PEANO	YES	NO	Ask to be reviewed and put in place by 1st April 2019
United Kingdom/UK federation	YES	YES	Meets requirements
Zambia / FIDERN

Participating Member Nits

Federation	Issue	Status	Decision
Argentina/MATE	No creationInstant available	Support/Chair to make contact with the federation on this issue.	No decision was made here.
Finland/HAKA	No creationInstant available	Support/Chair to make contact with the federation on this issue.	No decision was made here.
Greece/GRNET-AAI	~~SG deputy missing~~	Support/Chair to make contact with the federation on this issue.	Resolved by GRNET.
Ireland/Edugate	No creationInstant available	Support/Chair to make contact with the federation on this issue.	No decision was made here.
Portugal/RCSTaai	No creationInstant available	Support/Chair to make contact with the federation on this issue.	No decision was made here.
Spain/SIR	No creationInstant available	Support/Chair to make contact with the federation on this issue.	No decision was made here.

Participating Member Problems (1)

Federation	Issue	Status	Decision
Croatia/AAI@EduHr	Supplied English version of the Policy missing	Will be available by Tuesday 1 May 2018	To be reviewed at the next SG meeting.

Long term candidacy (13)

Federation (13)	Date of Application	Status	Decision
Albania - RASH	2018-01-18	Recent applicant. No Policy/MRPS.	New simple bar for participation (responding to email) will be applied.
China - CSTCloudFederation	2017-11-10	Recent applicant. Ready for assessment.	New simple bar for participation (responding to email) will be applied.
China - CARSI	2017-08-01	Declaration only. No Policy/MRPS.	New simple bar for participation (responding to email) will be applied.
Lebanon - LIFE	2017-08-07	MRPS required prior to assessment	New simple bar for participation (responding to email) will be applied.
Malawi - MAREN	2016-06-08	Declaration only. No Policy/MRPS.	New simple bar for participation (responding to email) will be applied.
Mexico - FENIX	2017-10-25	Declaration only. No Policy/MRPS.	New simple bar for participation (responding to email) will be applied.
Montenegro - eduID	2015-06-16	Policy under development.	New simple bar for participation (responding to email) will be applied.
Oman - OMREN Fed	2018-02-21	Under assessment in July/August 2018.
Pakistan - PKIFED	2018-09-06	Recent application. Ready for assessment.
Russia - фEDUrus	2013-07-03	Under assessment in July/August 2018.
Serbia - iAMRES	2015-04-01	Declaration only. No Policy/MRPS.	New simple bar for participation (responding to email) will be applied.
Slovakia - safeID	2015-06-16	Recent activity. New SG deputy and work on Policy.	New simple bar for participation (responding to email) will be applied.
Zambia - FIDERN	2018-06-15	Under assessment in July/August 2018.
Romania - RoedunetID	TBD	Declaration sent to GÉANT.

Members not actively contributing metadata (6)

Federation (6)	Application Date	Joining Date	Status	Decision
Bulgaria - BIF	2017-03-15	2017-10-27	Operational Federation not Supplying Metadata	It was agreed that there are no issues with Bulgaria's participation.
Cyprus - CyNet Identity Federation	2017-05-18	2017-08-15	Federation Production supported by GRNET	No decision was made here.
Italy - Grid Identity Pool	2013-07-03	2016-08-11	Operational Federation not Supplying Metadata	It was agreed that there are no issues with GridIdP's participation.
Mozambique - CAFMoz	2016-10-13	2018-08-03	Recently joined. Metadata signing verification required.	Clarify metadata signing certificate provenance.
New Zealand - Tuakiri New Zealand Access Federation	2013-11-26	2013-11-26	Operational Federation not Supplying Metadata	It was agreed that there are no issues with NZ's participation.
Turkey - YETKİM	2013-11-06	2013-11-26	No Policy, No MRPS, No Metadata	Turkey was flagged as not meeting the current requirements for membership. This will be followed up with YETKIM.

Countries in Europe with no Federation (9)

Country (9)	Status
Andorra	no information
Azerbaijan (GM / EP)	no information
Bosnia and Herzegovina	no information
Kazakhstan	no information
Kosovo	no information
Malta	no information
Monaco	no information
San Marino	no information

Page tree