ELCIRA and eduGAIN: Practical aspects of interfederation for academic collaboration Brook Schofield, TERENA ● TICAL2013, Cartagena, Colombia ● 8 th July 2013
About me… Brook Schofield skype://brookschofield tel: linkedin.com/in/brookschofield I work at TERENA in Amsterdam. eduGAIN Task Leader in the GN3plus Project. eduroam Global Governance Secretary. ELCIRA Project participant.
A family of services
eduroam status… eduroam Pilot Deployment
eduroam at TICAL2013 Countries AR BR CA CL CO ES NL PE UK US ?? Institution ?? Devices >3k AuthN Latest stats at goo.gl/jNQHY
eduroam in Latin America 3 production deployments – Brazil, Peru, Chile 7 pilot deployments – Argentina, Colombia, Costa Rica, Ecuador, El Salvador, Mexico, Uruguay eduroam Pilot :-(
eduGAIN status… eduGAIN Member Joining eduGAIN Candidate Federation Existing/Pilot Federation MoU Signed with ELCIRA
Identity Federations and Latin America eduGAIN Participant – Brazil (CAFe) Joining eduGAIN – Chile (COFRe) Pilot Federation – Peru Emerging Federations – Argentina, Colombia, Costa Rica, Mexico eduGAIN Member Joining eduGAIN Candidate Federation Pilot Federation MoU Signed with ELCIRA
Federation Development Campus Username/Password Store for AuthN IdP Expose Campus IdM via SAML/RADIUS Federation Aggregates IdPs & SPs; Builds Trust eduGAIN Aggregates Federations
Interfederation Patterns Research projects contribute SPs to their home fed. Use eduGAIN to collaborate. Commonly used pattern. Every federation must participate to make this work.
Science Gateway/Hub Build a science gateway and put services behind this. Common for community research projects. Supports a single community. Doesn’t remove need for NREN federation.
Research Project Federation A research project could build their own federation. This hasn’t been done before. Is an option to explore if there are many federations missing from your team.
What’s the best option? Anything is better than nothing. – Start thinking about federation – Desire to “share” is important for inter-federation Deployment options – eduroam is easy and needs a user/pw store – Shibboleth IdP or simpleSAMLphp on Campus – Don’t wait for a dominant tool to emerge! Remember to ask for help!
COFRe run by REUNA Started operation in 2012 Joined eduGAIN in mid-2013 ;-) 17 entities – 14 SPs – 3 IdPs Support from the NREN/Management Excellent engineering from Alejandro Lara Advice/guidance from ELCIRA/REFEDS/eduGAIN
Who to ask… Javier Richard Leandro José Luis …or visit the ELCIRA booth!