UPDATE ......Confluence has now been updated to version 9.2.6. Please see following page for details and feedback about changes:
Updates
Overview
| Proposer | Mihály Héder (HUN-REN) |
|---|---|
| Area | IDENTITY & ACCESS MANAGEMENT |
| Type of work | DEVELOPMENT |
| Output | PROTOTYPE |
| History | eduGAIN PoC |
Original proposal
Leveraging the fact that many T&I team members have experience in running SAML federations, we are well placed to create simulations of how a migration to / expanding with OIDFed would work for them. In order for the OIDFed to be successful, small and large, proxy-based and mesh federations all should be able to implement it with ease. By running some hypothetical, simulated migration projects, we would have comprehensive a gap analysis on OIDFed, both in terms of training materials, non-covered use cases and tooling for all kinds of federations.
Description of the activity
In this activity the team members will simulate what would happen if a decision was made to transition their national federations to OIDFed. Are all the tools ready? Are the necessary education materials for fedops available? Can they replicate all functionality that they already have in the SAML federation?
Ownership & Utilisation
The following parties will use the results of this activity:
| T&I Service | - |
|---|---|
| R&E Community | - |
| External Party | NREN Federations, eduGAIN |
Results & Deliverables
The following results were created and delivered:
- OpenID Federation R&E Testbed
- Instant integration via Apache module AuthMemCookie
- OFFA - Openid Federation Forward Auth
- GitHub: https://github.com/zachmann/offa
- Documentation: https://zachmann.github.io/offa/
- Docker: https://hub.docker.com/r/oidfed/offa/tags
- Demo: https://hello.test.fedcloud.eu
How to set up a minimal federation