Page History

Description

This subtask has been addressing the need to elevate the authentication assurance within eduGAIN.

Develop profile(s) and minimum requirement documents Develop procedures/metadata profiles for including two-factor support in eduGAIN. NOTE: not  

Design and implement two-factor / MFA service itself.approach. Pilot in research communities. 

Status

Started

Deliverables and Milestones

Official: None

Internal:

• Profile Recommendation in October/November 2016 (M7)  Daniela Pöhn
• MFA solutions - recommendations (M8) : Jule Ziegler

People

• Daniela Pöhn (Subtask lead)
• Jule Ziegler

Documents

Draft Profile Recommendation (Avaiable on request via Google Drive, Please contact the taskleader)

Reference Materials

Incommon MFA Working group: https://spaces.internet2.edu/display/MIPWG/MFA+Interoperability+Profile+Working+Group+Home

InCommon MFA Final Report: https://docs.google.com/document/d/11n4eA7R5fFIPD5ehDAjlNms7eEvuOdhYFRki9qYzkoY/edit?pref=2&pli=1

Results

Profile Work, Liaison with REFEDS Assurance WG and AARC2

REFEDS Assurance Suite: Composed out of 3 REFEDS Specifications

• REFEDS Assurance Framework (RAF):                           https://refeds.org/assurance
• REFEDS Single Factor Authentication (SFA) Profile:       https://refeds.org/profile/sfa
• REFEDS Multi Factor Authentication (MFA) Profile:         https://refeds.org/profile/mfa

Step-up Authentication, Liaison with GN4-2 JRA3 T2 (RASP) and AARC2

Document: Evaluation of possible LS AAI pilot solutions for StepUp.pdf

SIRTIFI Self Assessment Tool

The tool contains the essential features for a Self Assesemt regarding SIRTIFI. , i.e. reading IdP entities from Haka metadata, importing them to the tool, and inviting them to fill the Sirtfi survey (at Limesurvey). It also offers API endpoint for Haka resource registry to fetch information about fulfilled surveys. Two organizations (CSC and University of Helsinki) have already successfully used the tool for filling up the Sirtfi survey.

Source code: https://github.com/GEANT/SAT-SurveyManagerOASIS SAML Assurance Profile: http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-assurance-profile.html

Attachments