eduGAIN - Connecting Australian research capabilities globally via the Australian Access Federation

eduGAIN is a metadata aggregation service run by GÉANT for the global higher education community. It is essentially a federation "peering" service that provides a common mechanism for metadata exchange among Higher Education and Research Federations.

The eduGAIN service routinely imports metadata from multiple participating federations, aggregates the metadata into a single signed document, and then serves the aggregate back to federations who then distribute it to their subscribing IdPs and SPs.

What does it means to be an SP in eduGAIN

By joining eduGAIN as an AAF Service Provider you are making your service available to researchers globally. Any researcher who is affiliated with an institution that is connected to a federation also within eduGAIN can potentially use your service. You will still retain control over authorization to your service, restricting access according to your current policies.

Connecting your service to eduGAIN

There are a number of steps required to connect your service to eduGAIN. This article outlines these steps and provides links to supporting articles that provide all of the technical detail you require.

  • Assess whether your organisation is compliant or can comply with the SIRTFI (Security Incident Trust Framework for Federated Identity) guidelines for coordinating security incident responses in identity federations (optional but highly recommended).
  • Are attributes from the R&S /bundle required for your service to operate?
  • Does your service meets the R&S requirements
  • Request AAF to assert R&S on behalf of the SP. The AAF will verify your claim of being an R&S service.
  • Request attributes via the AAF Federation Registry
  • If your SP does not meet R&S requirements / or requires additional attributes:
  • Determine which attributes are required. (You may need to develop an integration guide for your service listing the attributes your service requires to distribute it to international IdPs that want to use the service).
  • Request attributes via the AAF Federation Registry
  • Ensure your Service Provider software is running the latest stable version
  • Consume the AAF eduGAIN Metadata
  • Configure a Discovery mechanism
  • Request to join your service to eduGAIN, email
  • Testing and go-live

After Joining

After you have successfully joined eduGAIN it is recommended that you make users aware of your service. Here are some possibilities:

  • Home page notification
  • Email campaigns and news letters
  • Conferences and similar meetings

The message is about extended connectivity and collaboration opportunities by making your service available to the global research and higher education community.