Baseline Expectations for Trust in Federation - Documents Quick Links

This page provides quick reference to documents related to Baseline Expectations planning

• Baseline Expectations for Trust in Federation (PDF) - see also below on this page
• Processes to Implement and Maintain Baseline Expectations of InCommon Participants  - DRAFT 
• Diagram on Baseline Expectations Community Dispute Resolution Process
• InCommon Federation Operating Policies and Practices (FOPP) with proposed changes for Baseline Expectations

Baseline Expectations for Trust in Federation are below
or you can downloading the PDF

Baseline Expectations of Identity Providers

1. The IdP is operated with organizational-level authority

2. The IdP is trusted enough to be used to access the organization’s own systems

3. Generally-accepted security practices are applied to the IdP

4. Federation metadata is accurate, complete, and includes site technical, admin, and security contacts, MDUI information, and privacy policy URL

Baseline Expectations of Service Providers

1. Controls are in place to reasonably secure information and maintain user privacy

2. Information received from IdPs is not shared with third parties without permission and is stored only when necessary for SP’s purpose

3. Generally-accepted security practices are applied to the SP

4. Federation metadata is accurate, complete, and includes site technical, admin, and security contacts, MDUI information, and privacy policy URL

5. Unless governed by an applicable contract, attributes required to obtain service are appropriate and made known publicly

Baseline Expectations of Federation Operators

1. Focus on trustworthiness of their Federation as a primary objective and be transparent about such efforts

2. Generally-accepted security practices are applied to the Federation’s operational systems

3. Good practices are followed to ensure accuracy and authenticity of metadata to enable secure and trustworthy federated transactions

4. Frameworks that improve trustworthy use of Federation, such as entity categories, are implemented and adoption by Members is promoted

5. Work with relevant Federation Operators to promote realization of baseline expectations