What is eduGAIN
eduGAIN provides an efficient, flexible way for participating federations, and their affiliated users and services, to interconnect
Today, online services are crucial for research and education. Students, teachers, researchers and institution staff rely on them for collaboration through many web services. This can be for e-learning, teaching and conferencing, analysing and sharing data, accessing journals and libraries etc. Enabling easy and convenient access to users is a key part of delivering a service. Service providers do not want the headaches associated with issuing passwords to users, and the user does not want yet another password.
With just听one trusted identity听provided by user鈥檚 institution as part of an identity federation participating in eduGAIN, users can access services from other participating federations. Even better, it works with single sign-on (SSO), so that user needs to login only one time during a browser session.
R&E identity federations are typically deployed on a national level and use different architectures, systems and policies. eduGAIN enables identity federations to interconnect, so that participating institutions and services can collaborate without the need to establish individual bilateral connections.
Benefits of eduGAIN
Users, services and organisations who need to easily and securely manage access to services benefit from eduGAIN because identity federations enable them to reuse their existing systems to operate across borders without having to make many individual agreements.
eduGAIN is a听. Around the world there are more than 55 federations participating in or in the process of joining eduGAIN, with more than 2,600 identity providers and 1,800 service providers.
听
听
Who is eduGAIN for?
听Identity federations
- Join the eduGAIN service as it enables you to interconnect with other federations
- Lean on eduGAIN trustworthy service 鈥 enables secure exchange of federation information
- Enable you to provide more services for your users available through other federations
- Gain in time saving and lower administration costs as no need for bilateral federation agreements
听Identity providers
- Join an identity federation participating in eduGAIN鈥
- Offer more to your users 鈥 enable access to a wider range of services than are available locally or nationally
- No extra administrative burden if you are already participating in an identity federation
听Users 鈥 identity holders
- Gain your federated identity from your home organisation i.e. identity provider
- Access a wider range of services than are available nationally or locally
- One digital identity for all services connected through eduGAIN
- eduGAIN is 鈥榠nvisible鈥 to you so you can access services without extra effort 鈥 just login and be online !
听Service providers
- Join an identity federation participating in eduGAIN
- Grow your audience by making your service available to a greater number of users
- Lower costs per user 鈥 your audience grows without increasing costs for maintenance of users credentials
Key concepts
Many organisations use听Authentication and Authorisation Infrastructures听(AAIs) to build a trusted environment where users can be identified electronically using a听single identity. The necessity for user identity to cross borders between organisations, domain and services, lead to the creation of听federated identity environments.
Home organisations听(e.g. a university, library, research institute etc.) register users by assigning a digital identity. They also operate an听Identity Provider听and are able to authenticate their users and provide a limited set of听attributes听that characterise the user in a given context.听Resource owners听(Service Providers) delegate the authentication to听Identity Providers听in order to control access to the provided resources.
An听Identity federation听is a group of Identity and Service Providers that sign up to an agreed set of policies for exchanging information about users and resources to enable access to and use of the resources. There are many Research and Education identity federations around the globe and they commonly have a national coverage. To discover worldwide identity federations,听.
eduGAIN听interconnects identity federations around the world, simplifying access to content, services and resources for the global research and education community. The eduGAIN technology involves a 鈥渕etadata service鈥, which regularly retrieves and aggregates information from participating federations about Service and Identity Providers, and makes this information available to federations. eduGAIN coordinates necessary elements of the federations鈥 technical in
frastructure and provides a policy framework controlling the exchange of this information between Identity Federations. For an overview of identity federations currently in eduGAIN, visit the听.
