ELCIRA and eduGAIN:

Practical aspects of interfederation for academic collaboration

Brook Schofield, TERENA ● TICAL2013, Cartagena, Colombia ● 8th July 2013

About me…

• Brook Schofield• mailto:schofield@terena.org• skype://brookschofield• tel:+31651553991• http://terena.org/~schofield• linkedin.com/in/brookschofield

I work at TERENA in Amsterdam.eduGAIN Task Leader in the GN3plus

Project.eduroam Global Governance Secretary.ELCIRA Project participant.

A family of services

eduroam status…

eduroamPilot Deployment

eduroam at TICAL2013• Countries

AR BR CA CL COES NL PE UK US

• ?? Institution• ?? Devices• >3k AuthN

Latest stats at goo.gl/jNQHY

eduroam in Latin America

• 3 production deployments– Brazil, Peru, Chile

• 7 pilot deployments– Argentina, Colombia,

Costa Rica, Ecuador, El Salvador, Mexico, Uruguay

eduroamPilot:-(

eduGAIN status…

eduGAIN MemberJoining eduGAINCandidate FederationExisting/Pilot FederationMoU Signed with ELCIRA

Identity Federations and Latin America

• eduGAIN Participant– Brazil (CAFe)

• Joining eduGAIN– Chile (COFRe)

• Pilot Federation– Peru

• Emerging Federations– Argentina, Colombia,

Costa Rica, Mexico eduGAIN MemberJoining eduGAINCandidate FederationPilot FederationMoU Signed with ELCIRA

Federation Development

Campus• Username/Password Store for AuthN

IdP• Expose Campus IdM via SAML/RADIUS

Federation• Aggregates IdPs & SPs; Builds Trust

eduGAIN• Aggregates Federations

Interfederation Patterns

• Research projects contribute SPs to their home fed.

• Use eduGAINto collaborate.

• Commonlyused pattern.

• Every federationmust participate to make this work.

Science Gateway/Hub

• Build a science gateway and put services behind this.

• Common forcommunityresearchprojects.

• Supports a single community.

• Doesn’t remove need for NREN federation.

Research Project Federation

• A research project could build their own federation.

• This hasn’t beendone before.

• Is an optionto exploreif there are manyfederations missing from your team.

What’s the best option?

• Anything is better than nothing.– Start thinking about federation– Desire to “share” is important for inter-federation

• Deployment options– eduroam is easy and needs a user/pw store– Shibboleth IdP or simpleSAMLphp on Campus– Don’t wait for a dominant tool to emerge!

• Remember to ask for help!

• COFRe run by REUNA• Started operation in 2012• Joined eduGAIN in mid-2013 ;-)• 17 entities

– 14 SPs– 3 IdPs

• Support from the NREN/Management• Excellent engineering from Alejandro Lara• Advice/guidance from ELCIRA/REFEDS/eduGAIN

Who to ask…

Javier Richard

Leandro José Luis

…or visit the ELCIRA booth!