InC Research Participants

[Scott Koranda <>]

---------- Forwarded message ----------
From: Hannah Short <>
Date: Wed, Sep 28, 2016 at 8:23 AM
Subject: [refeds] Sirtfi now strict requirement at CERN
To: "" <>

Dear REFEDS Colleagues, 

In the coming weeks, CERN will limit authentication to only those Identity Providers that have adopted Sirtfi. This means that users from other IdPs will no longer be able to authenticate at CERN. As many of you are aware, this change has been made quicker than expected so apologies for the lack of warning.

Sirtfi, the Security Incident Response Trust Framework for Federated Identity, is a means to identify Identity Providers with sufficient operational security capability and who are willing to collaborate during incident response. Security is a priority at CERN and, along with many like-minded organisation, we have been contributing to this initiative. 

@Federation Operators: Please consider supporting the adoption of Sirtfi and cascade this information to your participants. See https://wiki.refeds.org/display/SIRTFI/Guide+for+Federation+Operators  

@IdPs: If your researchers are members of CERN they will no longer be able to authenticate unless you have sufficient security practices to adopt Sirtfi. Audit your process and technologies, decide on your security contact and assert Sirtfi! See https://wiki.refeds.org/display/SIRTFI/Guide+for+Federation+Participants  (For a workaround in urgent cases, please contact us.) 

I know many of you are already supporting Sirtfi or working on it - thank you for your enthusiasm and I’ll look forward to seeing your users logging in!

Hannah

Attachment: signature.asc
Description: PGP signature