REFEDS Assurance pilot telco
Wednesday 2^nd May 2018 at 15:30 CEST/16:30 EEST/8:30 CDT
CERN’s Vidyo portal: https://www.nikhef.nl/grid/video/?m=rawg

Alan B
Michael S
Nicolas L
Daniel Y
Jim B
Pål A
Mikael L

Notes

• for notice: RAF and SFA now submitted to REFEDS for public consultation
• pilot IdPs and SPs
  • ELIXIR SP should now work for SFA/MFA too: https://perun.elixir-czech.cz/refeds-af-demo/
  • EGI Check-in SP still not part of eduGAIN so non-eduGAIN metadata exchange needed for testing with IdPs. Daniel and Jim are happy to exchange metadata to test their IdPs.
  • Chicago IdP plans to start by introducing the authentication contexts first and then ePAssurance values
  • CILogon SP doesn’t request any particular authentication context but consumes what the IdP asserts

• new configurations and findings
  • Daniel to document how Chicago IdP tested the CILogon SP's authentication contexts

• pilot final report
  • started working: https://wiki.refeds.org/display/GROUPS/RAF+pilot+final+report
  • Mikael to add that SimpleSAMLphp is indirectly covered by the ELIXIR Proxy IdP/SP proxy that further releases authentication context to the downstream SP.
  • Mikael to add an own section on the release of eduPersonAssurance attribute. Can the ePAssurance be included to the R&S attribute bundle? Can a recommendation be added to RAF that the CSP actually releases the ePAssurance attribute to a relying service?
  • the same applies with OIDC RPs; the RPs should request an appropriate scope (ePAssurance?) from the OP. Mikael to check with Niels the OIDCre working group's plans on scopes and eduPerson?

• next call: 14 May  at 15:30 CEST/16:30 EEST/8:30 CDT