Versions Compared

Old Version 13

changes.mady.by.user Nicole Harris

Saved on

compared with

New Version 14

changes.mady.by.user Nicole Harris

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Baseline RequirementPotential eduGAIN ImprovementsStakeholdersRequired Activities
[FO1] You focus on trustworthiness of Federation as a primary objective and are transparent about such efforts
  • Inability to filter out an entity
  • Lack of updates regarding FO changes (solved by health check? / audit)
  • Inability to take action over CoCo, Sirtfi, R&S violations
  • Governance structure not fit for purpose


[FO2] You publish contact information and respond in a timely fashion to operational issues
  • Enforce FO security contact
  • Poor response / participation from federations?


[FO3] You apply security practices to federation operations and ensure timely incident response

  • Inability to take actions centrally (In particular any complaint about a Member shall be made to the operator of its Participating Federation and dealt with between that Member and that operator according to the rules of that Participating Federation and subject only to that Participating Federation’s governing law and jurisdiction)
  • Lack of ability of eduGAIN to enact emergency changes and sanctions on entities
  • Suspension correlation to eduGAIN “rules”


[FO4] You follow good practices to ensure authentic, accurate and interoperable metadata to enable secure and trustworthy federated transactions
  • Inability to offer SPs a guaranteed response from specific IdPs - experience of trying to connect is too varied.
  • Some technical checks are informal (e.g. checking the UK import issues list) and not formalised.
  • Too many different tools, lack of one process for checking metadata issues.


[FO5] You implement and support frameworks that improve trustworthy and scalable use of Federation and promote their adoption by members and other participants
  • Governance structure not fit for purpose
  • Need to enforce standards like CoCo, R&S, Sirtfi, assurance, MFA and more
  • Assurance?
  • Adoption and promotion mandate


[FO6] You collaborate with other organisations to promote realization of baseline expectations nationally and internationally
  • Need to implement the baseline first.


...

To review the governance model for eduGAIN and make recommendations for improvements.

Core areas raised:

  • Current eduGAIN SG is more of an assembly and is not an effective decision making body.
  • Current eduGAIN SG is limited to federation operators.
  • Need for a smaller, elected focused SG?
  • Need for technical support committee?
  • Need a better way to review and accept new federations. 

Goal 4:

To cross-reference proposals with other working groups and the eduGAIN service teams.  

...