UK Access Federation

UK Access Federation
Name	UK Access Federation
Abbreviation	UKAF
Formation	2010
Type	Non-profit membership federation
Region served	United Kingdom
Headquarters	United Kingdom

UK Access Federation is a UK-based identity federation that provides single sign-on and federated access services for research, scholarship, and cultural institutions. It connects academic institutions, libraries, archives, museums, and service providers to enable seamless authentication for users from participating organisations. The federation interoperates with international federations and standards to support cross-institutional resource sharing and collaboration.

Overview

The federation operates as a hub linking higher education institutions such as University of Oxford, University of Cambridge, Imperial College London, University of Edinburgh, and University of Manchester with service providers including Jisc, British Library, National Archives of the United Kingdom, Europeana, and commercial providers. It implements protocols and standards developed by organisations like Internet2, OASIS, W3C, FIDO Alliance, and OpenID Foundation. The operational model resembles federated identity initiatives such as Shibboleth, eduGAIN, InCommon, SURFconext, and GÉANT, facilitating trust frameworks similar to those used by ORCID and Crossref.

History

The federation emerged from collaborative projects involving bodies like Joint Information Systems Committee, Digital Curation Centre, UK Research and Innovation, HEFCE, and consortia associated with Jisc Collections. Early pilots drew on software from Shibboleth Consortium, Internet2 middleware, and implementations tested with partners such as Wellcome Trust and British Museum. Over time the federation expanded membership to encompass national services such as Archives Hub and international collaborations with eduGAIN and GÉANT, while adopting guidance from standards bodies like ISO/IEC JTC 1 and IETF.

Services and Technology

Core services include a metadata registry, entity categories, attribute release policies, and a trust framework comparable to architectures used by Shibboleth and SAML 2.0. Technical stacks use software from projects such as SimpleSAMLphp, Keycloak, and libraries endorsed by Apache Software Foundation. The federation supports protocols and formats developed by SAML, OAuth 2.0, OpenID Connect, and authentication assurance models influenced by NIST publications. It provides testbeds integrating identity providers from University College London and service providers such as Springer Nature, Elsevier, and cultural data platforms used by Victoria and Albert Museum.

Governance and Membership

Governance structures reflect models from organisations like Jisc, Research Councils UK, Committee of Vice-Chancellors and Principals, and sector bodies such as Society of College, National and University Libraries. Membership categories include higher education institutions, further education colleges, cultural heritage organisations like British Museum, public sector libraries including National Library of Scotland, and commercial service providers such as ProQuest and EBSCO Information Services. Policy decisions are informed by advisory groups similar to those in HEFCE and Research England, while legal frameworks consider legislation like Data Protection Act 2018 and rulings of the European Court of Justice.

Security and Privacy

Security practices draw on best practices from UK National Cyber Security Centre, cryptographic standards published by NIST, and incident-response models from CERT-UK. Privacy policies align with instruments such as General Data Protection Regulation and guidance from Information Commissioner's Office. The federation mandates attribute minimisation and consent mechanisms analogous to frameworks promoted by Privacy Shield debates and ethical guidelines followed by Wellcome Trust. Audit and compliance processes mirror approaches used by ISO/IEC 27001 certified organisations, and threat modelling references work from OWASP and academic groups at University of Oxford and University of Cambridge.

Impact and Adoption

Adoption of the federation accelerated integration across consortia including Research Libraries UK, Russell Group, GuildHE, and specialist networks like M25 Consortium of Academic Libraries. The federation enabled cross-institutional initiatives in projects funded by UK Research and Innovation and collaborative infrastructures connected to Europeana and EMBL-EBI. Outcomes include streamlined access to subscription resources from vendors like Taylor & Francis, Wiley-Blackwell, and Cambridge University Press, improved researcher workflows comparable to services like ORCID, and enhanced public access through collaborations with British Library and regional archives.

Category:Identity management Category:Higher education in the United Kingdom