Interfederation

[Jim Basney <>]

Hi,

My notes from today's call are below.

For next Tuesday's call I propose the following agenda:

* LeifJ intro to Project Mario
* Update on LIGO-Cardiff pilot
* Update on SteveC's test deployment of MDA code at Brown
* Take-aways from Friday's TAC Community Update webinar
* Big picture discussion:
  What is interfederation?
  What are the hurdles we need to overcome to achieve interfederation?

Wiki link: https://spaces.internet2.edu/display/incinterfed

-Jim

-----

attending:
  JimB, ScottC, ScottK, IanY, SteveC, SteveT, MarkS, TomS, JohnK
ScottK and IanY discussed non-LIGO Cardiff interfed use case.
  Researcher at Albert Einstein institute in Germany
  wants access to Cardiff wiki. edugain use case?
LeifJ intro to Project Mario
  Postponed to next week due to scheduling conflict.
Interfed with India: news from ScottK's trip
  LIGO building a 3rd instrument in India.
  ScottK attended meeting in Pune, India last week.
  He gave a 2 day IDM workshop for IUCAA folks in attendance.
  Indian Federation - InFed - building a SAML federation for all
    higher ed in India. Using Shibboleth.
  Standing up centralized IdP as catch-all with migration plan
    to per-institution IdPs.
  Actively provisioning identities for >5m students.
  In about 6 months InFed will be ready to think about interfederation.
  Will use LIGO as an interfed driver.
  Will spin up a pilot project in a few months.
  How many campuses members of InFed now? Around 100 now?
  [AI] ScottK will share slides with InFed details.
  Current InFed institutions not the institutions that LIGO needs.
  But ScottK gave them a list and they'll prioritize those.
Update on LIGO interfederation with Cardiff.
  Contact made with Rhys @ Cardiff. Moving forward.
  Need to make decisions about how UK side will pick up InCommon MD.
  InC Ops could tell which entityIDs to pull from production InC MD.
  In the future would want a separate export metadata aggregate.
  LIGO for now but would want the flexibility to export additional.
  UK needs official permission from InCommon to use metadata.
  For now don't need to formalize guarantees.
  InC TAC talking about terms of use on metadata aggregate.
  Will it impact interfed?
  [AI] ScottK to send entityIDs, and JohnK to say it's OK to use them
  IanY has adapter ready on UK side.
  Ian will try to get UK policy decision tomorrow.
  LIGO can consume UK export aggregate.
  UK can consume subset of InC metadata entities.
  Then Cardiff will consume UK test aggregate containing LIGO entities.
  outcomes:
    Cardiff has access to metadata for LIGO SP(s).
    LIGO SP has access to Cardiff metadata.
    Then work out discovery and attribute release.
    Rhys @ Cardiff willing to release attributes.
Update on SteveC's test deployment of MDA code at Brown
  Since ScottK might not have time until May to experiment with MDA.
  SteveC has test instance of MDA running at Brown.
  Goal: produce a file that contains InCommon MD + UK export MD.
  Working through technical issues on producing this file.
  Then LIGO could try using it?
  MDA checks flagging entries in InCommon MD.
    Mostly to do with non-HTTPS endpoints.
    Very few serious issues.
  MDA ref is: https://shibboleth.net/products/metadata-aggregator.html
  SteveC owes IanY a Jira entry for the current issue.
  Next step is to discuss policy issues that this raises?
  Entity tags is one policy issue.
    Relevance to LIGO pilot: pass LIGO R&S tag to UK consumers.
    IanY will need to build infrastructure to better deal with
    importing metadata containing R&S attributes.
Preparing for Friday TAC Community Update webinar
  will central IT folks attending webinar be familiar with intl collab?
  get input from VOs that comanage is working with? LIGO, iPlant, ...?
  ScottK will touch base with Heather about this.
  iPlant pretty much based in US.
  iPlant not prioritizing federation support. No strong fed use cases.
  iPlant users happy using iPlant identity. Using CAS SSO.
  interfederation includes tiered federation, hierarchical federation?
  clarify: we have a loose working definition of interfed
  how to get answer to: what do you think interfederation means?
    list some possible definitions of interfederation
  not going to surprise people by rushing into interfed
  but we have compelling interfed use cases
  which countries? edugain and bilateral possibilities.
  skip the poll and focus on chat window input
  [AI] JimB will update the slides.
Next steps:
  Would be useful to enumerate the hurdles to interfed.
    What metadata does InCommon produce? What are policy issues?
    What are steps beyond LIGO initial pilot?