1. GÉANT 4-2 JRA3 Daniela Pöhn JRA3 T1 LRZ/DFN-AAI
REFEDS Technology Exchange 2016, Miami

2. Code of Conduct
European Parliament and Council: data protection reform  legal and federation consultation  analysis of eduGAIN’s policies focused on attribute release  effective 25 May 2018
2.0 draft should cover attribute release out of EU/EEA as well
Work with DLA Piper  analysis of policies
Possible to craft a single Code of Conduct that will work globally?
Roadmap:
Fall 2016: Prepare a draft of a new, GDPR compliant Code of Conduct
Spring 2017: Community consultation within REFEDS community
Iterate
25 May 2018 submit to the data protection authorities for approval

3. eduGAIN incident management development
SIRTFI
Security contacts in Metadata
Requirements from AARC
Probe
Overview/Monitoring page
Self-assessment tool
Monitoring page added to technical eduGAIN
Jagger support for SIRTFI
Management tool?

4. Multi-Factor Authentication
Profile similarly to InCommon
Planned: recommendations on software
Service offered/procured by GÉANT?