REFEDS

REFEDS
Name	REFEDS
Type	Non-profit community organization
Formation	2010s
Headquarters	Europe
Region served	International

REFEDS REFEDS is a community-driven consortium focused on identity federation, trust frameworks, and attribute sharing for research and education. It brings together academic institutions, national research and education networks, identity providers, service providers, and standards bodies to coordinate policies, specifications, and best practices. REFEDS convenes stakeholders from diverse organizations such as European Commission, United States Department of Education, GÉANT Association, TERENA, Internet2, and CERN to harmonize approaches across regions including European Union, United States, Canada, Australia, and Japan.

Overview

REFEDS operates at the intersection of federated identity systems like SAML 2.0, OpenID Connect, and infrastructure projects such as eduGAIN, InCommon, APAN, NORDUnet, and GÉANT. Its outputs influence deployments at institutions including University of Oxford, Massachusetts Institute of Technology, University of Cambridge, Stanford University, Princeton University, and research facilities such as European Organization for Nuclear Research and MAX IV Laboratory. REFEDS works with standards organizations like OASIS, IETF, W3C, and regional initiatives such as SURFnet and CANARIE to align policy with technical specifications.

History and Development

REFEDS originated from collaborative efforts among stakeholders involved in projects like Shibboleth, eduGAIN, and Federated Identity Management programs led by GÉANT Association and Internet2. Early activity drew participation from national bodies including JISC, DFN, RENATER, RedIRIS, and GARR. Over time REFEDS produced policy frameworks and practice statements that informed initiatives such as InCommon Federation and commercial federations including GLUU and Ping Identity deployments at institutions like Johns Hopkins University and University of Toronto. Notable milestones involved coordination with multinational research collaborations such as Large Hadron Collider experiments and international grid efforts like Open Science Grid.

Mission and Activities

REFEDS' mission centers on simplifying trustworthy access to online resources for researchers, educators, and students. Activities include development of attribute definitions adopted by entities like Elsevier, Springer Nature, Wiley, and scholarly infrastructures such as ORCID and Crossref. REFEDS issues guidance on assurance frameworks that align with programs like eIDAS Regulation, NIST SP 800-63, and national electronic identity schemes in countries such as Estonia, Germany, France, and Spain. It fosters community events and workshops alongside organizations like TERENA, Internet2, EDUCAUSE, and European University Association.

Standards and Specifications

REFEDS contributes to interoperable specifications referenced alongside SAML 2.0, OpenID Connect, OAuth 2.0, and metadata practices used by eduGAIN and Shibboleth. It defines attribute bundles and assurance profiles that correlate with schemas from LDAP, X.509, and certificate practices tied to authorities such as Let's Encrypt and European Telecommunications Standards Institute. REFEDS guidance often cites technical documents from IETF, OASIS, and W3C and integrates with trust frameworks used by eduGAIN and national federations like InCommon and Federation of Norwegian Research and Education Networks.

Governance and Membership

REFEDS governance is member-driven, with participation from higher education bodies including Universities UK, Association of American Universities, and national research networks such as SURFnet, DFN, RedIRIS, CANARIE, and Belnet. Working groups feature contributors from commercial identity vendors like PING Identity Corporation, Okta, ForgeRock, and academic identity projects such as Shibboleth Consortium and COmanage. Decision-making reflects consensus practices similar to those in W3C and IETF working groups, with liaison relationships to entities such as GÉANT Association and Internet2.

Adoption and Impact

REFEDS outputs are implemented by federations and institutions across continents, influencing authentication and authorization for services like Elsevier ScienceDirect, SpringerLink, IEEE Xplore, and scholarly platforms such as Zenodo and Figshare. The adoption of REFEDS-defined attributes and assurance profiles has enabled collaborations among research infrastructures including European Grid Infrastructure, Open Science Grid, and consortia like ELIXIR and CERN Openlab. National identity schemes implemented in Sweden, Norway, Netherlands, and Finland have referenced REFEDS guidance when integrating institutional identities with national eID systems.

Criticism and Controversies

REFEDS has faced critique over balancing privacy, attribute minimization, and interoperability; debates involve stakeholders including Privacy International, Electronic Frontier Foundation, and academic privacy offices at institutions like Harvard University and University of California, Berkeley. Controversies have arisen around attribute release policies and integration with national identity schemes governed by regulations such as General Data Protection Regulation and eIDAS Regulation. Vendors and some national federations including InCommon and SURFnet have at times disagreed over implementation timelines and the complexity of assurance frameworks promoted by REFEDS.

Category:Identity management