eduGAIN Steering Group

eduGAIN Steering Group
Name	eduGAIN Steering Group
Formation	2011
Type	Steering committee
Region served	International
Parent organization	GÉANT

eduGAIN Steering Group

The eduGAIN Steering Group provides strategic guidance for the eduGAIN inter-federation service, coordinating technical, policy, and community activities that connect research and education federations across regions. It interfaces with operational bodies and funders to align GÉANT initiatives, regional operators, and institutional identity providers with global interoperability goals. The group advises on policy harmonization, trust frameworks, and service evolution alongside stakeholders such as national research and education networks and international consortia.

Overview

The Steering Group oversees strategic direction for the eduGAIN interconnection, linking identity federations such as SWAMID, SURFconext, DFN-AAI, FEIDE, Federation of Argentine Universities, APAN, CANARIE, and JISC-supported services. It engages with organizations including GÉANT, Internet2, TERENA, European Commission, NORDUnet, and RESTENA to facilitate metadata exchange, trust anchors, and policy alignment. Members address interoperability between SAML 2.0, OAuth 2.0, and OpenID Connect deployments while considering the needs of CERN, Max Planck Society, CSIC, University of Oxford, and other major research institutions.

Governance and Membership

The group comprises representatives nominated by service operators, national federations, and sponsors such as GÉANT and European Commission programmes. Typical participants include technical leads from Internet2, EDUCAUSE, NORDUnet, RedCLARA, APNIC, and members appointed by regional bodies like TERENA and GEANT Association. Governance follows charters aligned with stakeholder bodies including RADIANT, REFEDS, InCommon, and national research infrastructures like SURF and DFN. Membership balances representation from identity providers at institutions such as Harvard University, University of Cambridge, ETH Zurich, and research infrastructures like ESRF and EMBL.

Roles and Responsibilities

Primary responsibilities include setting strategic priorities for metadata distribution, trust frameworks, and inter-federation policies involving SAML 2.0, OpenID Connect, and JWT use cases. The group coordinates technical working groups addressing consent, attribute release, incident response with parties like CERT-EU and FIRST, and legal compliance with statutes emerging from the European Union apparatus. It advises on adoption of standards from bodies such as OASIS, IETF, and W3C, and promotes best practices among federations including InCommon, AARC, EUDAT, and ELIXIR.

Decision-Making and Meetings

Decisions are typically taken by consensus among appointed representatives, with formal votes used for charter amendments or major policy changes involving stakeholders like GÉANT, European Commission, Internet2, and national funding agencies. The group schedules regular meetings, often teleconferences and annual plenaries co-located with conferences such as TNC, Internet2 Global Summit, TERENA Networking Conference, and RIPE NCC events. Meeting outputs are coordinated with technical committees and task forces from REFEDS, AARC, eduGAIN Operations Team, and national federations.

Interaction with eduGAIN Services and Policies

The Steering Group advises on the operation of services such as metadata distribution, trust anchors, and SAML proxies, liaising with operational teams at GÉANT, RESTENA, DFN, and regional operators like RedIRIS and CARNet. It shapes policy documents affecting attribute release, entity registration, and publication policies, aligning with recommendations from REFEDS and legal frameworks influenced by directives from the European Commission and guidance from EDPS. The group also evaluates integration with identity and access management products from vendors used by institutions such as Microsoft, Google, Okta, and ForgeRock.

History and Developments

Established in the early 2010s as international federations matured, the group evolved from coordination activities formerly managed by TERENA and projects funded by the European Commission and GÉANT. Milestones include formalizing metadata aggregation practices, adopting policy baselines informed by REFEDS and the AARC project, and addressing protocol evolution from SAML 2.0 to broader OIDC adoption. The group has responded to incidents impacting major research organizations like CERN and coordinated enhancements following operational lessons from federations including InCommon and SWITCH.

Criticism and Challenges

Critics point to governance complexity given diverse stakeholders such as European Commission, national research and education networks, and large institutions like Harvard University and University of Cambridge, and to slow policy change processes compared with commercial identity providers such as Google and Microsoft. Technical challenges include harmonizing attribute schemas across providers like ORCID-connected services, migrating legacy SAML deployments, and ensuring resilience against security incidents affecting entities like CERN or national infrastructures. The group also contends with legal and regulatory fragmentation across jurisdictions including European Union member states, United States, and regions served by RedCLARA and APAN.

Category:Identity management Category:GÉANT