1. INTRODUCTION: THE FIRST TRY InCommon eduGAIN Policy and Community Working Group

2. Trust Basics: The Actors User: Person accessing the service Identity Provider: The organization that knows that person and verifies her identity online. Service Provider: The organization the offers the service and grants access to use it. Federation Operator: The organization that vets the membership, implements the community “rules” and publishes the certified phonebook.

3. Trust Basics: Federation is Distributed Services Service Provider Authorization Certified Federation Metadata “Phone Book” End User Authn 6 - Authorization 1 Fed schema Enterprise Directory Federation Software 3 2 - Request Authentication & Access Information (attributes) 4 5 – Authentication Verified. Sending Attributes 7 2 Federation Software Campus Authentication and User Information 3 - Authentication

4. Trust Basics: Federation is Distributed InCommon Federation (7.8 million users and 663 organizations) Identity Provider Services (368) Application Services (1,849) InCommon Operations (1)

5. Trust Basics: Federation is Shared I have to trust what you do with my Data that I send you Service that you use Being comfortable with how my partners perform their roles is key.

6. Trust Basics: Federation is Fractal Roughly speaking… Concerns at the org level are the same at the national level: Privacy Membership Risk Control over who my partners are First step to Trust is Publish what you do

7. Trust Basics: Publish What you Do First Step: Publish InCommon Participant Operating Practices eduGAIN participation requirements Second Step: Decide

8. Refeds MAP

9. eduGAIN Policy Flow GEANT (governing structure) US Federation (InCommon run by Internet2) eduGAIN Service EU National R&E Federations (Gov sponsored) Feds in Asia, Middle East, India, Africa, North & South America, ….

10. A Word about Metadata InCommon Metadata Aggregate (Official “phone” book) Federation tags and authority Identity provider info Service connection Info

11. What’s in the Metadata “Phonebook”? Information about: Security (signing keys) Contacts (troubleshooting and support) Connection (URLs of services) Verifier of the orgs/metadata (InCommon) Policy and practice compliance tags (R&S, Assurance)

12. eduGAIN is about Metadata Exchange International Metadata Aggregate eduGAIN authority All Fed A info Limited Fed B Info

13. Questions?