1. International Growth of Federations & eduGAIN
Brook Schofield
eduGAIN Product Manager
GÉANT
Internet2 Global Summit, Chicago
17th May 2016

2. International Growth of Federations & eduGAIN
Brook Schofield
eduGAIN Product Manager
Senior VP of Federated Hopes & Dreams
GÉANT
Internet2 Global Summit, Chicago
17th May 2016

3. Global Authentication INfrastructure

4. eduGAIN Success in 3 easy steps
Federations
Image:
Page:

5. Identity Federations (before eduGAIN)
This is the federation landscape in 2011.
16 Production Federations
6 Pilot Federations

6. International Growth
June 2012  Oct 2014
May 2015  April 2017

7. Deployment Path of Federated Services
eduroam
NREN Federation RADIUS
Campus RADIUS
Hotspots
WebSSO
Campus IdP
Campus Services
SAML Federation
NREN IdP
NREN Services
eduGAIN
Federation Policy
Sharing Services
eduroam (FLR) -> Campus -> Hotspots
SAML Federation -> NREN IdP -> NREN SPs -> Campus IdP -> Campus SP
Federation Policy -> Join eduGAIN -> Share Services
SAML Federation -> NREN IdP -> Campus IdP
eduroam -> Campus -> Hotspots

8. At the start of the ELCIRA project June 2012
eduGAIN Member
Joining eduGAIN
Candidate Federation
Existing/Pilot Federation
Target service region

9. At the end of the ELCIRA project June 2012  Oct 2014
eduGAIN Member
Joining eduGAIN
Candidate Federation
Existing/Pilot Federation
Target service region

10. Deployment Path of Federated Services
Federation Policy
Framework to share services
SAML Federation
eduGAIN
NREN IdP NREN Services
WebSSO
Campus IdP
Campus Services
eduroam
Federation RADIUS
Campus RADIUS
Hotspots

11. Lessons forgot…
Just four months after Galloping Gertie collapsed, a professor of civil engineering at Columbia University, J. K. Finch, summarized suspension bridge failures in an article in Engineering News Record. "These long-forgotten difficulties with early suspension bridges, clearly show that while to modern engineers, the gyrations of the Tacoma bridge constituted something entirely new and strange, they were not new—they had simply been forgotten."
Just four months after Galloping Gertie collapsed, a professor of civil engineering at Columbia University, J. K. Finch, summarized suspension bridge failures in an article in Engineering News Record.
"These long-forgotten difficulties …, clearly show that while to modern engineers, the [issues] constituted something entirely new and strange, they were not new—they had simply been forgotten."
"These long-forgotten difficulties …, clearly show that while to modern engineers, the [issues] constituted something entirely new and strange, they were not new—they had simply been forgotten."

12. Lessons forgot… 2004  Present
InCommon started in 2004 ahead of the deployment of eduroam within the Internet2 community.
2004  Present

13. eduGAIN & Federation Status
Big growth in new federations – many have aspirations to join eduGAIN and interfederate.
May 2016
38 eduGAIN Members
5 Joining eduGAIN
8 Candidate Federations
10 Known Federations

14. Federations: 63% + joining: 70% Entities: 27% (ALL) IdPs: 57% SPs: 14%
eduGAIN vs the World!
Federations: 63%
+ joining: 70%
Entities: 27% (ALL)
IdPs: 57%
SPs: 14%
38/61=64%

15. eduGAIN & Federation Status (% of entities)
15%
29%
78%
Australia: 1/252=
Brazil: 127/162=78% USA: 482/ =8.4% (check this for eduGAIN content)
UK: 3131
0.3%
March 2016
38 eduGAIN Members
5 Joining eduGAIN
8 Candidate Federations
10 Known Federations

16. Drill down to the AAF’s 0.3%
15%
29%

17. Drill down to the AAF’s 0.3%
15%
29%

18. Drill down to the AAF’s 0.3%
15%
29%

19. eduGAIN & Federation Status
15%
29% x
78%
March 2016
38 eduGAIN Members
5 Joining eduGAIN
8 Candidate Federations
10 Known Federations

20. Glass Houses…

21. Glass Houses…

22. Glass Houses…

23. Glass Houses…

24. ✘ ✔ D (B-) A C ? Results? eduGAIN Metadata Stream Attribute Check IPv6
vho.aaf.edu.au
Idp.dante.net
eduGAIN Metadata Stream ✘ ✔
Attribute Check
D (B-)
IPv6
Certificate Check A C
Result ?

25. Remember the lessons for “eduGAIN works”
100% of the federations
Is the entity in eduGAIN?
Does it talk with “friends”?
Does it release attributes?
Matches security practices?
CoCo or R&S

27.
Update this.