OPEN CALL – AUTHENTICATION
Figure 1: GÉANT-TrustBroker core workflow
Figure 1 gives an overview of the so-called GNTB core workflow [3]. The user experience when using GNTB is almost identical to using the well-known discovery services (a.k.a. Where Are You From?) of NREN federations and eduGAIN. IDPs and SPs need to indicate their preparedness for using GNTB by performing a one-time registration on the GNTB website. Any further actions, such as updating an IDP´s or SP´s SAML metadata, can be fully automated by using a small set of simple command-line tools that are also developed as part of the prototype. User attribute conversion rules created by other IDPs can be re-used, so manual intervention is only necessary when a new user attribute is required to use a SP but the IDP can neither provide it out-ofthe-box nor use any of the already existing conversion rules.
III. CONCLUSION AND OUTLOOK The GÉANT-TrustBroker project has published several papers for both scientific audience and practitioners; they are linked on the GN3plus Open Calls website. Together with the Open Calls partner projects WoT4LoA and HEXAA, common scenarios and business cases are being worked out and will be presented in 2015.
ACKNOWLEDGMENT
The research leading to these results has received funding from the European Community’s Seventh Framework Programme under grant agreement nº 605243 (GN3plus).
REFERENCES
[1] GÉANT-TrustBroker website: http://www.geant.net/opencall/Authentication/Pages/ TrustBroker.aspx/ [retrieved December 9th, 2014] [2] Daniela Pöhn, Stefan Metzger, Wolfgang Hommel: Integration of Dynamic Automated Metadata Exchange into the SAML 2.0 Web Browser SSO Profile - draft-poehn-dame-02. I-D (Work in progress): https://datatracker.ietf.org/doc/draft-poehn-dame/, 2014 [3] Daniela Pöhn, Stefan Metzger, Wolfgang Hommel: GÉANTTrustBroker – dynamic identity management across federation borders. Networking with the World, in: The 30th Trans European Research and Education Networking Conference, Selected Papers, Dublin, Ireland, 2014
For more information on GÉANT Open Call see www.geant.net/opencall 21