eduGAIN Frequently Asked Questions

These questions and answers are intended to help you understand how joining eduGAIN will affect your organization and some of the policy questions to be considered.

What is eduGAIN?

eduGAIN collects, aggregates and distributes SAML metadata, enabling collaboration and access to online services globally. The eduGAIN service is operated by GÉANT (in the European Union) for the benefit of the higher ed community worldwide. Participating federations share metadata via the eduGAIN aggregation service, which facilitates SAML interoperability across federation boundaries. 

How does eduGAIN work?

Participating federations (including InCommon) export SAML metadata to eduGAIN. Then eduGAIN combines these metadata files into a single comprehensive aggregate. Participating federations then import the global metadata aggregate from eduGAIN and make that metadata available to their participants.

Why is InCommon participating in eduGAIN?

Research, scholarship and education are increasingly international endeavors. eduGAIN allows researchers, faculty, staff, and scientists to use familiar campus credentials to access collaboration tools and other services from around the world. All types of research projects will benefit from eduGAIN—from small collaborations involving two or three individuals to large government-funded virtual organizations. A major benefit of eduGAIN is that a Service Provider can join just one national federation and provide single sign-on access globally.

From a policy standpoint, what changes will this involve?

The InCommon Participation Agreement (which every InCommon participant has signed) has changed to include language specific to eduGAIN participation. Those changes go into effect on February 7, 2016. To take advantage of international interfederation, your organization must accept the changes to the Participation Agreement and the FOPP (Federation Operating Policies and Practices).

Please not that your current Participation Agreement remains in effect, so any changes you negotiated before signing remain. Think of these changes as amendments, as opposed to a brand new document.

Here are your choices:

1. If you agree to the changed documents, you can let us know, or you can remain silent. This means you agree to the changes, which go into effect Feb. 7, 2016, and you can participate in eduGAIN.
   
2. If you wish to propose changes to your Participation Agreement, you can complete a webform that will place your request in a queue. Until your proposal is resolved, your organization cannot take advantage of eduGAIN. Please note that InCommon has little ability to make modifications to the Participation Agreement for individual participants, unless such modifications are required by law.
   
3. If you object to the changes made to the documents, your current Participation Agreement will remain in effect, although your organization will not be able to benefit from international federation via eduGAIN.

he InCommon Steering Committee. Once Steering approves a revised Participation Agreement, those changes go into effect 90 days later. InCommon will publish the revised Participation Agreement for review during the 90-day period. The InCommon Federation Operating Practices and Policies will also change; the revised document will also be available for review.

What am I agreeing to with eduGAIN?

The eduGAIN Intent Statement reviews such topics as governance, transparency, policy structure, dispute resolution, and metadata sharing. In general, the policies of their home federations and the laws of their home countries bind all eduGAIN participating organizations. In short, InCommon participants remain under the policies and practices of InCommon, as their home federation.

How about policy changes locally?

If you operate a Service Provider, your policy decision is determining whether you operate a global service that would benefit from export to eduGAIN. If the answer is “yes” then you will need to take positive action to have your service included in the InCommon export. If you choose not to participate in eduGAIN, you may need to modify the configuration of your discovery service to only show IdPs registered by InCommon (insert link to documentation on that here)

As of February 11, 2016, we expect to export all IdP metadata to eduGAIN unless the IdP Operator has specifically asked that that organization’s metadata not be exported.

What are my other policy considerations?

InCommon has published an eduGAIN Intent Statement that outlines the rationale for joining eduGAIN, as well as a number of items for participants to consider in their deliberations.

I’ve read that an expanded attribute release policy is also a consideration. Is that true?

You do not need to change your attribute release policy in order to participate in eduGAIN. However, InCommon recommends that you review your policy and consider supporting the International (REFEDS) Research & Scholarship Category. By doing so, you would release a small set of attributes (generally considered directory information) to all Service Providers that have joined the International R&S Category. As additional services are approved for the category, they also receive this small set of attributes.

Adopting International R&S is intended to make interfederation-enabled collaboration seamless for faculty, staff, researchers and scientists, improving interoperability and the user experience.

Where can I learn more about eduGAIN?

The best place to start is www.incommon.org/edugain

My organization operates an Identity Provider. Do you recommend I export my metadata to eduGAIN?

Yes, we recommend that all Identity Providers include their metadata in the InCommon export to eduGAIN. One of the main purposes for InCommon joining eduGAIN is to provide seamless access to global services by faculty, researchers and scientists. You can facilitate that for your campus by having your identity provider included in the export. 

My organization operates one or more Service Providers. Do you recommend I export my metadata to eduGAIN?

If you provide a service with a global reach, we recommend you have your metadata exported to eduGAIN.

For example, a campus researcher may host a wiki or a database or some other service that needs to be available to colleagues in other countries. We recommend exporting that Service Provider to provide single sign-on convenience to international collaborators.

If you are with a company that provides a service globally, we recommend that you export that SP. If a service is strictly US-only, we recommend you not export your metadata – you will continue to be included in the InCommon metadata aggregate.