Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "VT Federated Identity Providers Assessment Task 1:Ireland"

From EGIWiki
Jump to navigation Jump to search
Line 6: Line 6:


The Terena webpage says "Personal: No" but https://certificates.heanet.ie/ claims "limited personal certificates" are supported via TCD.
The Terena webpage says "Personal: No" but https://certificates.heanet.ie/ claims "limited personal certificates" are supported via TCD.
See comments for some information on the "obstacles".


* ''In order to obtain a personal e-Science certificate from TCS, a user has to be affiliated with an institute that is part of the national identity federation and that has established an appropriate Subscriber Agreement. Please collect information about the institutes from which your NGI expects users (e.g. universities, research institutes) and indicate whether:''
* ''In order to obtain a personal e-Science certificate from TCS, a user has to be affiliated with an institute that is part of the national identity federation and that has established an appropriate Subscriber Agreement. Please collect information about the institutes from which your NGI expects users (e.g. universities, research institutes) and indicate whether:''
Line 14: Line 16:
** ''have those institutions signed the Subscriber Agreement with the NREN, i.e. whether they allow to issue TCS personal e-Science certificates to their members.''
** ''have those institutions signed the Subscriber Agreement with the NREN, i.e. whether they allow to issue TCS personal e-Science certificates to their members.''


No
No. I believe they *do* use other TCS certs.


* ''What is the process to get a personal e-Science certificate from TCS in your country?''
* ''What is the process to get a personal e-Science certificate from TCS in your country?''
Line 28: Line 30:
* ''Does your NGI or NREN provide any service similar to the TCS? Please choose zero or more from the following and provide a brief description:''
* ''Does your NGI or NREN provide any service similar to the TCS? Please choose zero or more from the following and provide a brief description:''


National grid CA is exploring possibility of using federated identity to populate user certificate request web form to classic CA.
National grid CA is exploring possibility of using federated identity to populate user certificate request web form to classic CA, and possibly to support SLCS, portal and other services.


* ''Any comments you have to TCS utilization in your NGI''
* ''Any comments you have to TCS utilization in your NGI''


Many Irish IdPs cannot confirm "face-to-face" identity checking of entries in their identity db.
Many Irish IdPs cannot confirm "face-to-face" identity checking of entries in their identity db, and are probably unwilling to modify their procedures to meet the needs of TCS e-Science Personal. This makes these IdPs ineligible.
This makes these IdPs ineligible for TCS.

Revision as of 10:55, 7 February 2012

  • Are personal e-Science certificates available through the Terena Certificate Service in your country?
    • If yes, contact the NREN/institute/company that provides TCS in your country and check that the information about the available certificate types is up to date on the on the Terena webpage. If the information is in the list is incorrect, what needs to be fixed?
    • If no, are there any plans to introduce the service (including timelines, obstacles identified, etc.)?

No. Other TCS services are available

The Terena webpage says "Personal: No" but https://certificates.heanet.ie/ claims "limited personal certificates" are supported via TCD.

See comments for some information on the "obstacles".

  • In order to obtain a personal e-Science certificate from TCS, a user has to be affiliated with an institute that is part of the national identity federation and that has established an appropriate Subscriber Agreement. Please collect information about the institutes from which your NGI expects users (e.g. universities, research institutes) and indicate whether:
    • are those institutes members of your country's identity federation,

Yes

    • have those institutions signed the Subscriber Agreement with the NREN, i.e. whether they allow to issue TCS personal e-Science certificates to their members.

No. I believe they *do* use other TCS certs.

  • What is the process to get a personal e-Science certificate from TCS in your country?

Not supported in Ireland.

  • What are the rules for an institution in your country to join the identity federation and TCS?
    • Is there any special fee that an institution pays for joining TCS and/or the identity federation?

Join the federation: http://www.edugate.ie/membership Apply for TCS access: https://certificates.heanet.ie/node/4

  • Does your NGI or NREN provide any service similar to the TCS? Please choose zero or more from the following and provide a brief description:

National grid CA is exploring possibility of using federated identity to populate user certificate request web form to classic CA, and possibly to support SLCS, portal and other services.

  • Any comments you have to TCS utilization in your NGI

Many Irish IdPs cannot confirm "face-to-face" identity checking of entries in their identity db, and are probably unwilling to modify their procedures to meet the needs of TCS e-Science Personal. This makes these IdPs ineligible.