eduID

eduID
Name	eduID
Established	2015
Type	Federated identity
Country	Netherlands
Headquarters	Amsterdam

eduID

eduID is a federated digital identity service initiated to provide persistent, portable, and privacy-preserving identifiers for individuals associated with academic and research institutions. It aims to interoperate with institutional identity providers, national research and education federations, and international services to enable access to scholarly resources, collaboration platforms, and administrative systems. The service emphasizes user control, interoperability, and standards compliance to bridge institutional identity silos across borders.

Overview

eduID functions as a user-centric identity layer that connects individuals to services across higher education and research networks. It complements institutional credentials issued by universities such as University of Amsterdam, Leiden University, and Delft University of Technology by offering long-term identifiers usable even after affiliation changes. The service aligns with international federations and initiatives including eduGAIN, GEANT, and European Open Science Cloud to support cross-border authentication for platforms like ORCID, Figshare, and Zenodo. It is designed to coexist with identity protocols developed by organizations such as Internet2 and standards bodies like the World Wide Web Consortium.

History and Development

Development began in response to challenges faced by Dutch higher education institutions and research infrastructures transitioning between local identity lifecycles and pan-European services. Early stakeholders included national research networks such as SURFnet and consortia of universities including Utrecht University and Erasmus University Rotterdam. The project received technical guidance referencing standards from OASIS, protocol work at IETF, and authentication lessons from projects like Shibboleth and SimpleSAMLphp. Subsequent milestones involved pilot integrations with repositories and learning platforms at institutions like Vrije Universiteit Amsterdam and collaborations with projects under the auspices of NWO and regional service providers.

Functionality and Features

Key features provide persistent identifier issuance, attribute aggregation, and consent-driven attribute release to services. It integrates with attribute providers such as institutional Identity Provider (IdP) deployments at universities and supports service providers including research infrastructures, journal submission platforms, and learning management systems like Moodle implementations used at Eindhoven University of Technology. The platform supports single sign-on flows compatible with federated authentication ecosystems employed by organizations such as Elsevier, Springer Nature, and funding bodies like European Research Council. Privacy-preserving features draw on approaches advocated by EDPS stakeholders and align with regulatory frameworks from institutions such as European Commission directorates.

Governance and Security

Governance models incorporate multi-stakeholder oversight involving universities, national research networks, and non-profit organizations. Steering bodies have been informed by governance patterns used by SURF, GEANT, and consortiums tied to European Commission research programs. Security practices rely on cryptographic standards promoted by ISO/IEC and protocol recommendations from IETF working groups; operational safeguards mirror incident response procedures used by national CERTs like NCSC-NL. Privacy and legal compliance have been evaluated in contexts similar to cases handled by supervisory authorities including Autoriteit Persoonsgegevens and data protection frameworks referenced by European Data Protection Board.

Adoption and Use Cases

Adoption scenarios include alumni access continuity for graduates of institutions such as University of Groningen, researcher mobility support across consortia like CLARIN, and persistent access for visiting scholars affiliated with institutes such as Royal Netherlands Academy of Arts and Sciences. Use cases span federated access to digital libraries run by organizations like KB National Library of the Netherlands, manuscript submission workflows for publishers including Wiley, and collaborative platforms used by projects funded through bodies like Horizon Europe. The service supports integration with researcher identifier systems exemplified by ORCID and data repositories used by communities participating in initiatives such as EOSC.

Technical Architecture

The technical stack implements standard protocols and components common to federated identity infrastructures. Authentication and token exchange are facilitated via implementations compatible with SAML 2.0, OpenID Connect, and libraries pioneered by projects like Shibboleth and Keycloak. Attribute management and aggregation draw on metadata schemas influenced by activities at DCMI and identity metadata used by eduGAIN metadata aggregates. Operational deployment models mirror cloud-native patterns adopted by research infrastructures hosted on platforms such as SURFsharekit and container orchestration practices influenced by Kubernetes and continuous integration workflows from GitLab.

Category:Federated identity