REFEDs Wiki A test-bed for cross-federation practices ?

1
REFEDs WikiA test-bed for cross-federation
practices ?

• ltLOCATION TITLEgtltCity, CountrygtltDategt
• Firstname LastnameJob titlelastname_at_terena.org
  www.terena.org

2
Habemus federated wiki

• We thought we were setbut quiet a few issues
  arose
• Support for SAML2 only
• It turns out that there more SAML1.x IdPs than we
  thought.
• AuthZ, the famous entitlement
• Adding new IdPs, there is something to say about
  this
• Metadata encryption, hopefully solved.

ltlastname_at_terena.orggt
3
Authorisation now

• Already in place in the REFEDs wiki operated by
  RedIRIS

4
Authorisation in the future

• ACLs?
• Using rev. on both sides ?

5
Adding new IdPs

• Several options
• In some cases we simply add the metadata of a
  specific IdP
• Some federations require the federation IdP to be
  connected
• TERENA should sign an agreement with that
  federations
• Some federations proposed TERENA to join that
  specific federation