Interfederation Frequently Asked Questions
These questions and answers are intended to help you understand how eduGAIN will affect your organization and some of the policy questions to be considered.
What is eduGAIN?
eduGAIN collects, aggregates and distributes SAML metadata, enabling collaboration and access to online services globally. The eduGAIN service is operated by GÉANT (in the European Union) for the benefit of the higher ed community worldwide. Participating federations share metadata via the eduGAIN aggregation service, which facilitates SAML interoperability across federation boundaries.
How does eduGAIN work?
Participating federations (including InCommon) export SAML metadata to eduGAIN. Then eduGAIN combines these metadata files into a single comprehensive aggregate. Participating federations then import the global metadata aggregate from eduGAIN and make that metadata available to their participants.
Why is InCommon participating in eduGAIN?
Research, scholarship and education are increasingly international endeavors. eduGAIN allows researchers, faculty, staff, and scientists to use familiar campus credentials to access collaboration tools and other services from around the world. All types of research projects will benefit from eduGAIN—from small collaborations involving two or three individuals to large government-funded virtual organizations. A major benefit of eduGAIN is that a Service Provider can join just one national federation and provide single sign-on access globally.
From a policy standpoint, what changes will this involve?
The InCommon Participation Agreement (which every InCommon participant has signed) has changed to include language specific to eduGAIN participation. Those changes go into effect on February 10, 2016. You do not need to take any action if you agree with the changes. On November 12, InCommon will provide a policy and legal FAQ that will detail your other choices.
What am I agreeing to by participating with eduGAIN?
InCommon has published an eduGAIN Intent Statement that outlines the rationale for eduGAIN participation, while reviewing such topics as governance, transparency, policy structure, dispute resolution, and metadata sharing. In general, the policies of their home federations and the laws of their home countries bind all eduGAIN participating organizations. In short, InCommon participants remain under the policies and practices of InCommon, as their home federation.
How about policy changes locally?
If you operate a Service Provider, your policy decision is determining whether you operate a global service that would benefit from export to eduGAIN. If the answer is “yes” then you will need to take positive action to have your service included in the InCommon export aggregate. If you choose not to participate in eduGAIN, you may need to modify your service configuration to filter global metadata. (insert link to documentation on that here)
As of February 11, 2016, we expect to export all IdP metadata to eduGAIN unless the IdP Operator has specifically asked that that organization’s metadata not be exported.
I’ve read that an expanded attribute release policy is also a consideration. Is that true?
You do not need to change your attribute release policy in order to participate in eduGAIN. However, InCommon recommends that you review your policy and consider supporting the global (REFEDS) Research & Scholarship Category. By doing so, you agree to release a small set of attributes (generally considered directory information) to all Service Providers that have joined the global R&S Category.
Adopting global R&S is intended to make international collaboration seamless for faculty, staff, researchers and scientists, thereby improving interoperability and the user experience.
Where can I learn more about eduGAIN?
The best place to start is www.incommon.org/edugain
My organization operates an Identity Provider. Do you recommend I export my metadata to eduGAIN?
Yes, we recommend that all Identity Providers include their metadata in the InCommon export to eduGAIN. One of the main purposes for InCommon joining eduGAIN is to provide seamless access to global services by faculty, researchers and scientists. You can facilitate that for your campus by having your identity provider included in the export.
My organization operates one or more Service Providers. Do you recommend I export my metadata to eduGAIN?
If you provide a service with a global reach, we recommend you have your metadata exported to eduGAIN.
For example, a campus researcher may host a wiki or a database or some other service that needs to be available to colleagues in other countries. We recommend exporting that Service Provider to provide single sign-on convenience to international collaborators.
If you are with a company that provides a service globally, we recommend that you export that SP. If a service is strictly US-only, we recommend you not export your metadata – you will continue to be included in the InCommon metadata aggregate.