Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
| Table of Contents | ||||||
|---|---|---|---|---|---|---|
|
News
2025 REFEDS MFA Profile Working Group Underway
(posted April 2025)
The 2025 REFEDS MFA Profile Working Group is officially underway. This group aims to strengthen community support for stronger authentication by adding support for phishing-resistant multi-factor authentication (MFA). We invite everyone in the REFEDS community to participate in this important initiative. Whether you’re an IAM expert, a policy developer, or simply passionate about strengthening authentication practices, your voice matters! Please join us in Slack and on Zoom calls. Slack and Zoom call information is available on this page.
MORE:
- Charter for the 2025 REFEDS MFA Profile Working Group
- REFEDS Blog: Announcing the 2025 REFEDS MFA Profile Working Group
REFEDS MFA Profile v1.2 Consultation
(Posted: May 18, 2023)
The consultation for REFEDS MFA Profile v1.2 is open from Thursday, 18 May 2023 through 22 June 2023 at 17:00 CET. All further notifications and discussions of this consultation will take place on consulations@lists.refeds.org so please sign up there if you are interested.
REFEDS MFA Profile v1.1 Consultation
(Posted: November 14, 2022)
The consultation for REFEDS MFA Profile v1.1 is open from Monday, 14 November 2022 through 15 January 2023 at 17:00 CET. All further notifications and discussions of this consultation will take place on consulations@lists.refeds.org so please sign up there if you are interested.
Work Artifacts
Take one (May 2021 - Oct 2021)
Charter: https://docs.google.com/document/d/1TaGxX0VtAUNDP1uluBzIDar_eyBPMGUetalKCwGzGTU/
MFA Scenarios: https://docs.google.com/document/d/1xjOi3eHZ5CvtiUqGFbEjoLaTA0sZeqpBqjiWAShdvVE/
Work-in-progress FAQ: https://docs.google.com/document/d/17DtNQaVkwmnOPFrupujcM0PE7DxDsfi4Bl8HSKuMz7k/
Published FAQ (delivery to the REFEDS Assurance Working Group): MFA Profile FAQ
Take two (Oct 2021 - Mar 2022)
MFA Subgroup Charter Take Two: https://docs.google.com/document/d/10t_gJAgZzWjcMstFWdQK0vd7lpldwoHIf03CpTFMP6U/
MFA Profile Priorities discussion materials: https://docs.google.com/document/d/1Z1Wucm4_Khgrda4ALgBeUAS__76PpUA5_cByVH_lie0/
MFA Profile Priorities (delivery to the REFEDS Assurance Working Group): https://docs.google.com/document/d/1t4Y8yo0sZYCJl2XwF390mgixP0-w000rXpllGutG0cc/
Take three (Mar 2022 - Jan 2023)
Working document for MFA Profile Priorities: https://docs.google.com/document/d/1ooHflplRAlv8sQZX8h6zFGFyOK6YPxCOryc2dAQhxNA/
READ FIRST: Editors' Notes for REFEDS MFA Profile V1.1: https://docs.google.com/document/d/1Jfh5G3iUY-1E8s8MrbWK8GVSc0XT1JpjNlDl6HI5iqY/
(draft) REFEDS Multi-Factor Authentication Profile V1.1: https://docs.google.com/document/d/1GGOVFLMZSUSlnDTg42yQlZaVz9LLX3CEUk1Cr0Qqh_o/
Take four (Jan 2023 - April 2023)
(draft) REFEDS/Multi-Factor Authentication Profile V2.0: https://docs.google.com/document/d/1xaH-8Myd7ZCzW99wr5g58YX_IOdRl_2RHrCrBkOrpNk/
Consultation notes: https://docs.google.com/spreadsheets/d/1SEs4GU83G0R2Ds6L6UAHKEaS1E31hGpCHYlRN7jvx8w/
Take five (April 2023 - Nov 2023)
(draft2) REFEDS/Multi-Factor Authentication Profile V1.2: https://docs.google.com/document/d/1bf_mT4_3Ujb9eyj1RkY2oas82DgV4dmNhxe2wKPOxtA/
(draft) Updated MFA FAQ: https://docs.google.com/document/d/1kY7Jke3RqHOHBV_5FZZxVMM8iV0U7CsBJjVNdbRb6Tc/
Existing Related Documentation
REFEDS MFA documentation
The REFEDS MFA Profile: https://refeds.org/profile/mfa
Final Products of the MFA Interoperability Profile Working Group: https://spaces.at.internet2.edu/display/MIPWG/Final+Products+of+the+MFA+Interoperability+Profile+Working+Group
Software Documentation
Shibboleth
Meetings
Meeting notes: https://docs.google.com/document/d/1LMuHFO5hmcjzA1jhGaUwhB2l4WwPGRwfcKNeQ79Ig1E/edit?tab=t.0
Weekly meetings every Thursday, 6PM-7PM PM CET,
Zoom details
https://internet2.zoom.us/j/89251076560?pwd=TYGaUP7gC8AzOGk8amzTVFX1bARn2e.1
Berlin Thu 6PM CEDTAthens Thu 7PM EEDTNew York Thu Noon EDTLos Angeles Thu 9AM PDTLondon Thu 5PM BSTCorr. UTC Thu 4PM UTC
Channels
Slack channel: #assurance-mfa-subgroup at https://edugain.slack.com/
E-mail list: assurance-mfa-subgroup@lists.refeds.org https://lists.refeds.org/sympa/info/assurance-mfa-subgroup
About the MFA Subgroup
The MFA Subgroup is tasked by the REFEDS Assurance Working Group to update the REFEDS MFA Profile to make it easier to understand, interpret, and apply, so that:
- an federation SP operators can map it to their strong authentication requirements and trust that a federated IdP has performed MFA adequately.
- an IdP operators has sufficient deployment guidance to make better decisions and test for success.
- software implementers can better understand why, when, and how to support MFA signaling using the REFEDS MFA Profile in their products.