Guest Identities – Milan workshop goals Authentication and Authorisation for Research and Collaboration Jens Jensen JRA1.3, AARC STFC AARC workshop, Milan 02.11.15

AARC JRA1.3: Guest Identities MJRA1.2: guest identities (PM12) Google doc: https://docs.google.com/document/d/1jkZGmtlvDMDlbfmbcNRTtbz spmR3hSlm8p0YkVyo-oQ/edit?usp=sharing Anyone with link can comment; invited people can edit As the link is publicly available, it was thought best to restrict access Do ask for access!

Document outline Introduction and Motivation What are guest identities, why use them Gov’t, banks, social media, community specific IdPs Guest identities and their technologies Specific providers, public or project/community specific Registries and meta-providers Standards Software (should this move to the famous MJRA1.1?) Working with Guest Identities LoA, reputation, risks AARC and Guest Identities Recommendations Guidance for RPs, end users, infrastructures

Specific Questions for you! SA1: We need a plan for testing (some) guest identities And the means of managing their LoA and other meta- attributes (i.e. attributes about the IdP rather than provided by the IdP) NA3: Risks associated with using guest identities Policy for what different LoA guest identities may do Any specific LoAs to use for guest identities? Multiple logins to the same account (e.g. with different LoAs) All If you have one of the identities listed, please volunteer to write about it! If you have one not listed, please add it! (if you think it is useful) Even if you are not listed as contributor, you can write a paragraph…! (and get credit for it of course)

jens.jensen@stfc.ac.uk j.jensen.ral@gmail.com