VT Federated Identity Providers Assessment

General Project Information

• Leader: Daniel Kouril (CESNET)
• Mailing List: vt-egi-federated-identity@mailman.egi.eu
• Status: Active
• Start Date: 10/Nov/2011
• End Date: When its goal is achiveved, but not later than 30/Apr/2012
• Meetings: 12/12/2011 - Kick-off meeting

Motivation

Federated identity services could significantly simplify access to the infrastructure. Introducing federated identity mechanisms in EGI is a requirement from many communities. This VT project would take a step towards this direction, by assessing the readiness of the NGIs in adopting some type of federated identity provision mechanism for accessing services (e.g. Terena Certificate Services). Several NGIs have done developments towards this direction.

Output

The output of this project is [https://documents.egi.eu/document/1178

Tasks

Task 1: Assess the coverage of Terena Certificate Providers in NGIs

• Check whether the key institutes form the NGIs are connected to the TCS
• Check whether the NGIs have process to add institutes to TCS and what the process look like
• Collect info about other types of services similar to TCS that NGIs already use

Actions

• Fill in the questionnaire (all participating NGIs)
• Completed questionnaires:
  • Ireland, Czech Republic, France, Switzerland, Italy, template

Members

• NGIs:
  • Czech Republic: Daniel Kouril (Leader), Michal Prochazka
  • France: Genevieve Romier
  • Greece: Kostas Koumantaros, Christos Kanelopoulos
  • Ireland: David O'Callaghan
  • Italy: Marco Bencivenni, Enrico Fattibene, Daniele Cesini, Roberto Barbera, Marco Fargetta
  • Germany: Torsten Antoni
  • Switzerland: Simon Leinen
  • Taiwan: Eric Yen, Vicky Huang
• EGI.eu:
  • Gergely Sipos

Resources

• List of TERENA certificate providers: http://www.terena.org/activities/tcs/participants.html
• Federated web services: http://atlases.muni.cz
• Mechanism to release a x509 certificate in a user-transparent way from an online CA: http://wiki.italiangrid.it/twiki/pub/UserSupport/NGIITGeneralPurposePortal/Whitepaper-portal-CAonline-interaction.pdf
• Edugate: Federation of Irish Higher Education Institutions and Research Organisations: http://www.edugate.ie/
• EduGAIN: "Federation of the federations": http://www.geant.net/service/edugain/pages/home.aspx
• Moonshot: Passing identity federations into the non-web world: http://www.project-moonshot.org/

Progress

• Task 1
• Task 2
• ...
• Task N