Australian Access Federation

Australian Access Federation
Name	Australian Access Federation
Abbreviation	AAF
Formation	2008
Type	not-for-profit
Headquarters	Australia
Region served	Australia, Pacific

Australian Access Federation

The Australian Access Federation is a national identity federation providing federated identity and access management for higher education, research, cultural institutions, and government-linked services. It connects institutions, service providers, and sectoral infrastructures to enable single sign-on and trusted attribute exchange across platforms used by universities, libraries, museums, and research facilities. The Federation interoperates with international initiatives to support collaboration among institutions such as universities, research organisations, and cultural bodies.

Overview

The Federation operates within an ecosystem that includes Internet2, eduroam, GLAM (galleries, libraries, archives, and museums), Australian Research Council, CSIRO, Australian Catholic University, University of Melbourne, University of Sydney, and Monash University. It provides services akin to those used by Shibboleth, SAML 2.0, OpenID Connect, eduGAIN, and InCommon. Stakeholders include identity providers drawn from institutions such as Australian National University, University of Queensland, University of Western Australia, and service providers including Elsevier, Springer Nature, JSTOR, and national infrastructures like AuScope and National Computational Infrastructure.

History and Development

The Federation emerged amid national efforts parallel to initiatives like eduroam and APNIC cooperation, influenced by international developments including UK Access Management Federation, GEANT, InCommon Federation (US), and standards from OASIS. Early pilots involved partners such as Australian Research Data Commons, Trove, National Library of Australia, and state-based university consortia including Queensland University of Technology and University of Adelaide. Milestones involved adoption of Shibboleth software, migration toward SAML 2.0 profiles, and later integration of OpenID Connect for cloud services from vendors like Google, Microsoft, Amazon Web Services, and publishers such as Wiley-Blackwell. Governance and technical frameworks were shaped alongside policy bodies like Australian Digital Health Agency and infrastructure projects including NeCTAR and Australian Research Council funding programs.

Governance and Membership

Governance structures align member institutions including public universities like University of New South Wales, University of Tasmania, private institutions like Bond University, and research agencies such as CSIRO and Australian Nuclear Science and Technology Organisation. Membership categories mirror models used by InCommon Federation (US) and UK Access Management Federation and include identity providers, service providers, and relying parties such as National Library of Australia and State Library of Victoria. Policy development has involved consultation with bodies including Tertiary Education Quality and Standards Agency, ACES-style consortia, and sector groups represented by Universities Australia and the Group of Eight (Australian universities). Technical committees have featured experts from Griffith University, Swinburne University of Technology, RMIT University, and intermediaries like AARNet.

Services and Technical Architecture

Core services include metadata aggregation, trust frameworks, attribute release policies, and federation registries interoperable with eduGAIN and GLAM Federation patterns. The technical stack often uses Shibboleth, SimpleSAMLphp, Keycloak, and OpenAM implementations for SAML 2.0 and OpenID Connect protocols. Integration practices reflect work with platforms such as Canvas (learning management system), Blackboard Learn, Moodle, and research tools including ORCID, ResearchGate, Figshare, and GitHub. Identity proofing and attribute management intersect with services like Australian MyHR standards, :Category:Authentication-adjacent systems used by National Computational Infrastructure and cloud providers like Microsoft Azure and Google Cloud Platform.

Security, Privacy, and Compliance

Security practices draw from standards and audits similar to those by ISO/IEC 27001, Australian Signals Directorate guidance, and sectoral privacy regimes such as Privacy Act 1988-related frameworks and compliance expectations aligned with Office of the Australian Information Commissioner. Risk mitigation strategies reference incident response procedures used by CERT Australia and identity assurance models akin to those promoted by NIST and OIX frameworks. Privacy-preserving attribute release models build on policy precedents from InCommon Federation (US) and eduGAIN, with participation from legal and policy stakeholders including Australian Human Rights Commission in relation to data protection and ethical use.

Collaborations and Partnerships

The Federation partners with national and international organisations such as AARNet, eduroam, eduGAIN, Internet2, GÉANT, CERN, European Organization for Nuclear Research, and sectoral bodies including National Library of Australia, State Library of New South Wales, Australian Research Data Commons, and vendor partners like Elsevier, Springer Nature, Clarivate, ProQuest, and cloud vendors Microsoft, Google, and Amazon Web Services. Collaborative projects have involved interoperability testing with ORCID, Crossref, DataCite, and research infrastructure projects like NeCTAR, AuScope, and National Computational Infrastructure.

Impact and Adoption

Adoption spans Australian universities such as University of Technology Sydney, Macquarie University, Deakin University, and research organisations including CSIRO and Commonwealth Scientific and Industrial Research Organisation initiatives, improving access to resources like Trove, JSTOR, Project MUSE, and publisher platforms. The Federation has supported cross-institutional research collaboration in fields represented by bodies like Australian Research Council, Medical Research Future Fund, and infrastructure projects including Australian Synchrotron and Square Kilometre Array. Internationally, interoperability with eduGAIN and federations such as InCommon Federation (US) and UK Access Management Federation has facilitated global researcher mobility and access to shared digital resources.

Category:Identity management