A distinctive feature of e-infrastructures is that most individuals’ authorisation to access a particular service does not come from their home organisation (as it does for site-licensed journals, for example) nor from the operator of the service (as in traditional, non-federated, access).
A growing challenge for on-line e-infrastructures is to manage an increasing number of user accounts, ensuring that accounts are only used by their intended users, that users can be held accountable for any misuse, and that accounts are disabled when users are no longer entitled to use them. Users face a similar challenge in managing multiple authentication credentials for different on-line services.
Some thoughts on the e-Infrastructure requirements for supporting Virtual
Organisations.
A Virtual Organisation (VO) is one that intersects with multiple real
organisation. It is comprised of users from multiple home
institutions. Many of which may be entirely unaware of the existence
of the VO at all. This means that the Virtual Organisation needs to
be self-organising and must be provided with the tools to manage its
own membership.
One of the potential problems we have identified with AuthN tools like UK-Federation and Moonshot is that they (for good reasons) generate a different identifier for each service domain.