These are the final top level areas for the 2017 workplan, drawn from proposals crowdsourced in 2016. 


REF17-1: REFEDS Coordination and Management

Lead: Licia Florio / Nicole Harris


  • To progress REFEDS position as an important player within the access and identity management space internationally.  
  • To build on established relationships with GÉANT project, ISOC and Kantara. 
REF17-1AREFEDS BOFS at appropriate meetings throughout the year (maximum of 2).Suggestions for where to target BOFs in 2017 welcomed - in 2016 we went to WACREN and APAN.Nicole Harris 01/17 12/17 No specific REFEDS activities in 2017 apart from 2 x general meetings and a workplannning meeting. 
REF17-1BMaintain and develop the REFEDS blog, wiki and website.

As normal.

Nicole Harris / Licia Florio 01/17 12/17 Ongoing work as normal.
REF17-1CREFEDS annual meetings.TNC and Internet2 Technology Exchange Meeting.Nicole Harris / Licia Florio 01/17 10/17 2 x meetings held and blog posts from the meetings circulated. 
REF17-1DImplement 2017 REFEDS Survey.Rolling out towards the end of the year seemed to be effective in 2016 and helps feed into the work planning.Nicole Harris 09/17 12/17 Comments are with the Steering Committee.
REF17-1EManage REFEDS contracts with third parties.These are contracts with external parties that support REFEDS such as Spherical Cow and RETI.Nicole Harris / Licia Florio 01/17 06/17 Delayed due to problems with new processes at GÉANT.  All issues now resolved. 
REF17-1FManage REFEDS Sponsorships.Current sponsor list.Nicole Harris / Licia Florio 12/16 01/17 

REF17-2: Specialist Working Groups

Lead: Heather Flanagan


  • To provide infrastructure and support for evolving ideas and areas in the REFEDS community. 

FOG: Federation Operators Group

Peter Schober with support from Nicole Harris01/201712/2017 Operating as normal. 

OIDC(re): OpenID Connect for Research and Education

Niels van Dijk with support from Heather Flanagan01/201712/2017 OIDCre
REF17-2CSIRTFIHannah Short with support from Nicole Harris01/201712/2017


Activity to investigate and report on the various ways Identity Federations have implemented incident response handling internally.

The result should provide national federations with insight on what to expect when contacting a peer, and opportunity for alignment and improvement. In addition it could support Sirtifi and eduGAIN e-Science support activities within AARC GEANT projects.

Template for federation operators.

Scoping tools to automate Sirtfi response testing and compliance.

REF17-2DORCID Laura Paglione with support from Heather Flanagan 01/2017 12/2017 The Group published a paper of recommendations in April 2017. This paper was presented during TNC17:  
REF17-2EIdPs of Last ResortKeith Hazleton with support from Heather Flanagan01/201712/2017

Un-Affiliated IdP Working Group Draft Annual Report, 2017.  Need to consider how to use this in conjunction with Academia to differentiate IdPs.

Continue on work to define ways of tagging IdPs of Last Resort and defining a specification for minimum requirements of such an IdP within federation environment.

REF17-2FAssuranceMikael Linden with support from Heather Flanagan01/201712/2017

Work progressing well, second round of consultation planned.  MFA profile in place, work on single factor / good entropy expected.

Various work has been put into better defining the baseline requirements for activity in federations - including via InCommon and the REFEDS assurance group.  This work will look to operationalise this work in the context of existing federations and eduGAIN.

Work is underway on baseline expectations for IdPs and an Assurance Wireframe.  The assurance working group will continue in 2017. The intention is to expose the assurance profile to a community consultation until end of March and then update the assurance profile and publish it as an AARC deliverable. After that, in AARC2, we probably need to have a small pilot before it can be rolled out. 

REF17-2GEntity Category SupportNicole Harris01/201712/2017

Work on Academia in progress.

Work for REFEDS R&S v1.3 completed.  Next steps: R&S2, affiliation, academia

Abstract attributes

 - define approaches to abstract attributes to allow groups of attributes to be used.

 - feed into proposals to produce guidelines on attribute release for edugain.

 - create registry of attributes if appropriate.

Exchanging entity attributes outside of those with global definitions (e.g. R&S, Sirtfi etc) creates a potential for mounting conflict; part of handling this is orchestration and handling. There may also be tags that are defined within a federation, but not cross federation. This creates a vocabulary control challenge. Who handles the responsibilities among the fed ops to consider this and does this need managing? This work area will initially focus on discussion here (best practice), clarifying use cases and create a matrix to inform the discussion.  Recommendations on future steps to support this (including potential registries, rules for stripping using MDQ etc.) will be made.


Federation Trust 2.0

Design, resource, and deploy a global metadata distribution infrastructure for both per-entity and aggregate metadata serving needs, for all federations to use, at global scale.

Per-entity metadata and dynamic federation ideas force a rethinking of how Federations Operators signify their validation or endorsement of certain metadata statements, and consequently a rethinking of much of the process of operating a federation. Deliverables:

  1. Define workflows that endow trust in dynamic federation metadata, ie, work out operational aspects of Roland's paper.
  2. Define an architecture or design in which it is easy for each recipient to validate dynamic metadata.
  3. List ramifications for standard federation operating procedures in a dynamic metadata environment.
TBATBATBA No progress

REF17-3: Promotion and Communication

Lead: Nicole Harris


  • To provide materials and support mechanisms to help federations promote effective approaches to IdPs and SPs.
  • To provide feedback on documents produced by other groups to support clarity of messages.
  • To reach out to target groups where specific messaging could be beneficial.
REF17-3APromotional material and support for entity categories

Nicole Harris



REFEDS Discovery Guide, Mark 2

Consent is used often within identity federations. While on a national level it may be clear what asking and giving consent entails, unfortunately consent does not mean the same thing in various countries as the legal grounds for consent vary. Also there are many ways to implement consent. What makes a good consent page and what does not? When is it (not)   user friendly, what should be shown to make it legally usable? What are the best practices around consent globally?

This activity investigates what it means to ask and give consent in various countries. In addition it describes recommendations for 'good' and 'bad' consent pages similar to the Refeds Discovery Guide.

Include note on how hub and spoke federations manage discovery.


Publisher engagement

It is proposed that concerted effort be spent in 2017 to engage publisher groups and tackle some of the wider problems in the publisher space.  This will be in coordination with the "RA21" group.  Heather to produce a proposal on this.

Heather Flanagan   
REF17-3D2pager for SPsGÉANT manpower   

Service Catalogue definition

Various proposals have been made to create a federation service catalogue, most recently at ACAMP:  This work will focus on defining staged requirement sets for a service catalogue and make recommendations as to how to implement such a service and where this should be hosted.

Heather Flanagan   

REF17-4: Standards and Specifications

Lead: Nicole Harris


  • To provide support for the development of standards and specifications under the REFEDS banner.
  • To pilot specification work to support implementation requirements.
  • To put in place structures to ensure specification and schema sustainability.

eduPerson / SCHAC liaison
 - Work on adding new values to eduPerson (pre-attendance).

REF17-4BREFEDS RFC ProcessContractor   
REF17-4CFederation Metadata Submission API standardContractor   

REF17-5: REFEDS Services

Lead: Nicole Harris


  • To continue using MET and enhance where possible.
  • To support the basic REFEDS infrastructure needs (website, wiki and mailing lists). 


Contract in place with GARR for central operations.  Development work to be contracted to RETI (Andrea).

New features added and delivered in Oct.





  • No labels