eduGAIN – Are we there yet?

Lukas Hämmerle (ghost writer, Brook Schofield)

FIM4R, Helsinki – 2 October 2013

2Connect | Communicate | Collaborate

All About eduGAIN…

Global Authentication INfrastructure

Web site: http://www.eduGAIN.org/

SAML2-based ("All roads lead to SAML2")

Currently mostly web-based services but non-web services are supported too (e.g. via SAML ECP)

An interfederation service primarily for Research & Education

Connects existing SAML-based academic identity federations

Developed and funded by European GEANT projects

But open also to non-European federations

Complaints/comments to @BrookSchofield or schofield@terena.org

3Connect | Communicate | Collaborate

What is eduGAIN?

eduGAIN provides policy framework and standardsto build trust

SPs and IdPs of participating federations should opt-in for eduGAIN

MDS fetches, aggregates and republishes metadata

4Connect | Communicate | Collaborate

Full Mesh Federation

~80% of all NREN Federations (June 2013)

E.g • InCommon• UKAMF• SWAMID• HAKA• AAF• SWITCHaai• ...

5Connect | Communicate | Collaborate

Hub-and-Spoke Federation with Distributed Login

~15% of all NREN Federations (June 2013)• SURFconext• WAYF.dk• SIR• TAAT• Confia

6Connect | Communicate | Collaborate

Hub-and-Spoke Federation with Central Login

~5% of all NREN Federations (June 2013)• FEIDE• AAI@EduHr

7Connect | Communicate | Collaborate

The More "Realistic" Architecture

8Connect | Communicate | Collaborate

eduGAIN Video

Search "benefit from edugain" on youtube.com

9Connect | Communicate | Collaborate

Some Statistics

April 2011: Official start of eduGAIN

Now: 19 Federations (now also including UK) , 6 joining

Current Entities: 143 IdPs, 73 SPsOne IdP can stand for dozens of organisations depending on federation architecture

Whole (academic) SAML landscape:43 Federations, 2390 IdPs, 4654 SPs (gathered from metadata)Not all of them need to be interfederated, e.g. many internal SPs

10Connect | Communicate | Collaborate

eduGAIN Interfederation Participants

19 eduGAIN Members 6 Joining eduGAIN 5 Candidate Federations

11Connect | Communicate | Collaborate

eduGAIN & Federation Status

19 eduGAIN Members 6 Joining eduGAIN 5 Candidate Federations13 Emerging Federations

12Connect | Communicate | Collaborate

Bridging the gab between Fed + Inter-Fed

The team is working on improving these stats:

Policy & Code of Conduct (Mikael Linden, CSC)

Operational Team (Tomasz Wolniewicz, UMK)

Emerging Federations (Brook Schofield/Nadia Sluer, TERENA)

Project Moonshot Pilot (John Chapman,JANET )

FaaS Study (Marina Vermezovic,AMRES/Valter Nordh, SWAMID)

Engaging User Communities (Lukas Hämmerle, SWITCH)

…all complementary GEANT tasks to support the community.

We’re here @ VAMP, FIM4R & REFEDS

Listening to your suggestions and feeling the fire

13Connect | Communicate | Collaborate

What will we continue to do?

Investigate and pilot solutions supporting Data Protection

Ensure we don’t run out of customers (by building more federations)

Too successful at the moment

Convert the success in building federations eduGAIN participation

Engage with the Research Infrastructure community

Continue to listen… …and learn.

14Connect | Communicate | Collaborate

www.geant.net

www.twitter.com/GEANTnews | www.facebook.com/GEANTnetwork | www.youtube.com/GEANTtv

Connect | Communicate | Collaborate