InCommon Technical Discussions

[Nick Roy <>]

David Kelsey from the FIM4R group is working on a proposal for a
research proxy trust mechanism called "Snctfi" that may provide value in
pursuit of this kind of proxy.

https://wiki.geant.org/display/AARC/Snctfi

Nick

Nick

On 3/30/17 7:18 AM, Scott Koranda wrote:
>> Perhaps this is better solved then by standing up a 2nd hub and spoke
>> style service?  The VOs would use that one.  The 100 or so who “get
>> it” would see no difference.  The 300 ‘others’ would also be able to
>> interop just fine, but their users would be stopped at the federation
>> IdP to self-assert missing attributes?
>  
> Perhaps.
>
> LIGO has resisted so far deploying an IdP/SP proxy and putting all of
> its SPs behind it to continue to try and advocate for better attribute
> release, both within InCommon and more generally throughout eduGAIN.
>
> But all the other research projects I work with are deploying proxies
> they operate individually as a project.
>
> I expect LIGO will move in that direction soon also.
>
> An InCommon proxy service for VOs would be interesting. It would need
> functionality that VOs require that is not always thought about for
> campus proxy solutions, but the VOs are well aware of those needs and
> can articulate them.
>
> Thanks,
>
> Scott K for LIGO