VT Federated Identity Providers Assessment Task 1:Italy

From EGIWiki
Jump to: navigation, search
EGI Activity groups Special Interest groups Policy groups Virtual teams Distributed Competence Centres


EGI Virtual teams: Main Active Projects Closed Projects Guidelines
  • Are personal e-Science certificates available through the Terena Certificate Service in your country?

YES and the information about the available certificate types are up to date

    • If yes, contact the NREN/institute/company that provides TCS in your country and check that the information about the available certificate types is up to date on the on the Terena webpage. If the information is in the list is incorrect, what needs to be fixed?

YES

    • If no, are there any plans to introduce the service (including timelines, obstacles identified, etc.)?
  • In order to obtain a personal e-Science certificate from TCS, a user has to be affiliated with an institute that is part of the national identity federation and that has established an appropriate Subscriber Agreement. Please collect information about the institutes from which your NGI expects users (e.g. universities, research institutes) and indicate whether:
    • are those institutes members of your country's identity federation,

The most yes, but we expect users from institutes that are not members of our federation (IDEM)

    • have those institutions signed the Subscriber Agreement with the NREN, i.e. whether they allow to issue TCS personal e-Science certificates to their members.

YES

  • What is the process to get a personal e-Science certificate from TCS in your country?

The procedure is web based and it collects information to create the certificate from the attributes released by IDP (https://tcs-escience.garr.it)

  • What are the rules for an institution in your country to join the identity federation and TCS?

All organisations connected to GARR, the Italian National Research Network (i.e. Universities and research organizations) can join the Federation as full members. In addition, third-party organizations (i.e. publishers, software /service providers etc), can join the Federation as partners in case they provide relevant contents or services to the education and research community. For both, participation is subject to the IDEM Policy Committee‘s approval

    • Is there any special fee that an institution pays for joining TCS and/or the identity federation?

YES

  • Does your NGI or NREN provide any service similar to the TCS? Please choose zero or more from the following and provide a brief description:

We are working to build a MICS CA using federated identity (IGTF accedited) because a TCS policy says that the key pair has to be generate locally to the user and this is a big obstacle for our purposes

  • Any comments you have to TCS utilization in your NGI

Obtain a certificate with TCS is very simple