UK e-Infrastructure Security & Access Management WG

Last updated:

4 months 2 weeks ago

Group Manager

At the request of the Research Councils UK e-Infrastructure group, Janet established a working group from 2013-2016 to support those providing and using e-infrastructure services in achieving an approach that both protects services from threats and is usable by practitioners. More detail about the group can be found in the Terms of Reference The Working Group published the following papers: E-infrastructures: Access and Security (summary paper) (Jan 16) Federated Authentication for e-Infrastructures (Sep 14) Technical Security for e-Infrastructures (Nov 14) Authorisation/Group Management for e-Infrastructures (May 15) Policies for e-Infrastructures (Jan 16) Accounting and e-Infrastructures (Nov 16) Information about the Working Group's activities, as well as discussion documents, links and recommendations is linked under the following categories. Unless marked otherwise, all items are works-in-progress and we very much welcome your comments and contributions. Meetings Presentations Case Studies Discussions Technologies References Andrew Cormack (WG Chair)

Group administrators:

Andrew Cormack

Recent members:

Draft e-Infrastructure Landscape Mapping

Andrew Cormack

19 February 2014 at 11:03am

Table of contents

Discussion places
Technologies
(Potential) Identity Providers
Standards bodies & Regulators
Projects, services & initiatives with federated Id requirements

To better understand the access and identity management and security technical landscape, the UK e-infrastructure Security and Access Management Working Group produced a mapping of the various groups, activities and technologies that the Group is aware of.

These mappings will be updated and developed by the Working Group over the course of the Working Group.

Discussion places

Meetings and groups where discussions take place relevant to e-infrastructure security and access management

FIM4R (Federated Identity Management for Research) - series of workshops investigating federated identity membership for research collaborations, resulting in a Fim4R paper. First five meetings and sixth
EIROforum - http://www.eiroforum.org/
REFEDS - https://refeds.org/ Working on common issues among research and education identity federations.
VAMP (Virtual Organisation Architectural Middleware Planning) - http://www.terena.org/activities/vamp/ Series of workshops on federated identity and collaboration tools within the research community
Open Grid Forum - http://www.ogf.org
Research Data Alliance - RDA - https://rd-alliance.org/
EDUCAUSE - http://www.educause.edu/
Internet2 – http://www.internet2.edu
UCISA - http://www.ucisa.ac.uk/ provision and development of academic, management and administrative information systems in universities and colleges
RUGIT - http://www.rugit.ac.uk/ IT heads of leading UK research universities

Technologies

Technologies and technology standards that may be appropriate for e-infrastructure access management

SAML - https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security
OpenID Connect - http://openid.net/connect/
OAuth 2.0 - http://oauth.net/2/
Moonshot – http://www.ja.net/moonshot
Shibboleth – http://www.shibboleth.net

(Potential) Identity Providers

Some of the organisations who may provide authentication services, and in some cases attributes relevant for authorisation decisions, for users of e-infrastructures

Facebook
Amazon
Google
Mozilla
Members of Research and Education federations
Members of eduGAIN

Standards bodies & Regulators

Not all either standards bodies or regulators in the strict sense, but organisations whose decisions and requirements may influence the use and development of e-infrastructures.