Task 1 - Harmonisation

1

Entity Categories

This work item will work with REFEDS to identify and define entity categories which will help automate and reduce the workload of attribute release and management for identity providers towards service providers. The work will include:

1. Identifying priority entity categories
2. Working within REFEDs to specify entity category  types and content, with sensitivity to global needs.
3. Piloting key use cases within the GÉANT community in collaboration with Task 5: Enabling Users.
4. Driving take-up of support for entity categories within the GÉANT eduGAIN membership by bringing proposals for their adoption to the eduGAIN SG.

2

Code of Conduct

This work item will work with REFEDs to address issues relating to mitigating risks associated with release of personal information by identity providers. The work will include:

1. Continue to develop non EU/EEA Code of Conduct, and supporting  material within REFEDs.
2. Ensure the GÉANT and non-EU variants are constantly checked against the latest in Data Protection and other relevant legislation.
3. Initiatives and developments to support greater uptake of the Codes of Conduct with GÉANT eduGAIN members.

3

Federation operation practices

This work item will collaborate with REFEDS and with E-INFRA-7 to support the work started in the REFEDS Federations  Operations Practices on topics such as metadata management, key operations and others. The work will include:

1. Participation in the Federation Operators group to further identify and refine the practices necessary to guarantee the integrity, availability and confidentiality of the federation operations service provided by the national identity federations.
2. Piloting the best practice with a subset of federations in the GÉANT eduGAIN community .
3. Driving take-up of support for operations best practice within the GÉANT eduGAIN membership by bringing proposals for their adoption to the eduGAIN SG.

4

Service Aspects of Assurance

This work item will collaborate with JRA3, E-INFRA-7 and via REFEDs to address a subset of issues with regard to Levels of Assurance in identity federations and ultimately in eduGAIN from a service perspective.

The goal is to understand the service delivery implications of existing levels of assurance approaches to provide an extensible framework that suits the needs of research collaborations and users from different fields, and identify those that are achievable within a reasonable time frame within GÉANT.

The work will include:

1. Active participation in the REFEDS working group on Levels of Assurance and contribution to the requirements for Levels of Assurance on behalf of eduGAIN.
2. Requirements analysis of user communities and capability analysis of identity providers and federations, building on results from GN3plus and E-INFRA-7 pilots.
3. Preliminary investigations of the business aspects/value proposition for LoA implementation e.g. high level adoption benefits and implications at pan-European, federation and campus levels.

5

Interoperability

This work item will develop sustainable approaches to interoperability with e-Gov (STORK), social media identity frameworks and other lifelong identity initiatives, especially of NRENs. Work will include:

1. Completion of pilot use cases with STORK2.0 and a roadmap towards sustainable long-term implementation based on GN3plus experience.
2. Engagement with standards areas, such as Kantara on behalf of eduGAIN.
3. Development of results from JRA3 as appropriate e.g. Federation lab.

[Internal]

Proposal for entity categories adoption in eduGAIN

1.1

[Internal]

[Disseminated as needed as a white paper]

5

[Internal]

Proposal for Federation operational good practices adoption in eduGAIN

1.3

[Internal]

[Disseminated as needed as a white paper]

6

[Internal]

LoA service architecture options and capabilities analysis

1.4

[Internal]

[Disseminated as needed as a white paper]

7

[EC]

Report on Harmonisation Development and Pilots

1.1-5

R

PU

11