1. The French federation Eurocamp 2007 Helsinki
Olivier Salaün

2. The CRU federation Targetting ~200 French HiEd institutions
Operated by the CRU
Service started in mid 2006
Shibboleth-based
Currently :
25 IdPs ( students)
12 SPs

3. The CRU provides… A test federation (self registration)
A production federation
A default identity providers
For the IdP-less users
Includes group management features

4. The services Library resources
On-line courses (national and regional scales)
Wi-Fi access for roaming users
At a regional scale
Aside eduroam service
Software distribution for students
Intranet for virtual organizations

5. Policies / agreements
The federation is defined as a technical infrastructure, providing a minimum level of assurance
The policy defines :
the responsabilities of IdPs / SPs / the CRU
a set of good practices (no auditing procedures)
Joining the federation :
IdPs sign a registration agreement
SPs sign a registration form

6. Responsabilities SPs expect IdPs to : IdPs expect IdPs to :
ensure the security of the authentication service
ensure the ready availibility of their authentication service
deliver user attributes according to the common designations, semantics, and associated nomenclatures
IdPs expect IdPs to :
make a legitimate use of user attributes

7. Definition of user attributes
Based on SupAnn, the LDAP schema for French universities
Supann :
Based on eduPerson
Also defines a set of roles
Ongoing work to extend SupAnn for :
Courses definition
Structures definition

8. Current concerns Perimeter of the federation to cope with :
Research institutes
HiEd institutions belonging to other ministries
Services for VOs require :
Support for distributed identity providers
Extending the set of service providers

9. More information http://federation.cru.fr/cru/index-en.html