Dokumentation DFN-AAI, DFN-PKI und eduroam - en:aai

about

Anonymous (anonymous@undisclosed.example.com) — 2024-01-15T14:46:32+00:00

2026/04/29 22:10	aktuell
Zeile 1:	Zeile 1:
	+	FIXME This page is not fully translated, yet. Please help completing the translation.\\ //(remove this paragraph once the translation is finished)//

	+	~~NOTOC~~
	+	====== Introduction ======
	+	{{INLINETOC 2}}
	+	===== What is the (DFN-)AAI? =====
	+	From a technical point of view, DFN-AAI is a specific type of web-based single sign-on (web SSO). This procedure allows users to log in to internal and external services (authentication) with the user credentials with which they are registered at their home institution (usually user name and password) and - provided they have the appropriate authorizations (authorization) - to use these services.
	+	The infrastructure required for this, AAI (= Authentication and Authorization Infrastructure), is traditionally implemented within the framework of national [[https://refeds.org/federations\|Federations]] and is usually operated by the respective research networks. In the case of the Federal Republic of Germany, this is the [[https://www.dfn.de\|DFN-Verein]].
	+
	+	The technical basis for such infrastructures is the exchange of metadata, in which the identity providers (IdP) of the home organizations (educational and research institutions) participating in the AAI and the service providers (SP) of the participating service providers (content providers, e-learning platforms, scientific services, etc.) are [[en:join\|registered]]. There are also external attribute sources, so-called attribute authorities, which an SP can use to retrieve additional, usually project-specific user data that is not maintained by the home institution. Such instances (IdP, SP, Attribute Authorities) are also referred to as entities. The information stored in the metadata includes both administrative (organization, contact data) and technical data (service endpoints, certificates, etc.) that are required for the entities to communicate with each other. SAML (Security Assertion Markup Language) has established itself as the standard across the board. The task of the respective federation is to maintain these data records, keep them up to date and ensure that a secure and trustworthy exchange of information takes place within the federation. The technical backbone of such a federation is therefore the metadata signed by the federation operator [[en:metadata\|signed Metadata]].
	+
	+	{{:de:aai:federation_metadata.png?800\|}}
	+
	+	Further and more detailed information can be found on the page [[de:aai:infos\|Weitere Informationsquellen]] and in [[https://download.aai.dfn.de/praesentationen/allgemein/ueberblick_dfn-aai.pdf\|this slideset]].
	+	===== Tasks of the Federation =====
	+	A federation acts as a //Trusted Third Party//, which ensures compliance with the technical and legal framework conditions and thus establishes a relationship of trust. In this role, the federation operator (DFN) takes on various tasks:
	+	* Contracts with all participating institutions and service providers, see under [[en:registration\|Registration]]
	+	* Creating guidelines (policies) and monitoring compliance with them
	+	* Operation of central localization services: Discovery services, also called "WAYF" (Where Are You From), see under [[en:production#discovery_service\|Productive operation]]
	+	* [[en:metadata_admin_tool\|Metadata management]]
	+	* Support for technical problems and questions related to AAI, see [[en:aai:contact\|Contact]]
	+	* Training for participating institutions and service providers (please send training requests to [[hotline@aai.dfn.de\|hotline@aai.dfn.de]])
	+	See also the presentation of the [[de:aai:portfolio\|Dienstportfolios der DFN-AAI]].
	+	===== AAI and Identity Management (IdM) =====
	+	=== IdM as Basis for participating in the (DFN-)AAI ===
	+	Within a federation, it is assumed that all participating institutions and service providers comply with common security standards in at least the following areas:
	+	* Authentication and authorization of users,
	+	* Access control to resources,
	+	* Organizational and technical processes that are run through when a person is admitted to the institution, changes role within the institution or leaves the institution.
	+	Providers of resources such as a commercial database are referred to as service providers in the AAI context. Service providers trust that the agreed license agreement will be adhered to. If a certain database is only available to students, for example, it is important that a person is no longer allowed to access this database after de-registration. If the license agreement states that only students of a certain subject may access the resource, these attributes (here: subject) must also be kept up to date and changed promptly in the event of a change of subject.
	+
	+	Institutions whose members want to use resources/services available within the AAI act as identity providers and are responsible for authentication and attribution. Identity providers are required to operate an identity management system, or at least a trustworthy user administration system with a consistent and up-to-date database. An identity management system does not have to be a commercial product; systems with automated processes that are implemented in open source software, for example, are considered equivalent. There must be common data schemas for the exchange of attributes. The mandatory and optional attributes to be used are documented at [[[[de:attributes\|documented here]].
	+
	+	A good introduction to the topic of identity management and AAI can be found in the [[https://download.aai.dfn.de/praesentationen/zki_ak_vd_2019_01/einfuehrung_idp_michels.pdf\|Präsentation von Thorsten Michels (Uni Kaiserslautern)]].
	+
	+	=== Requirements for participating in the DFN-AAI ===
	+	The operation of an identity management system or at least a trustworthy user administration system in which identities are managed according to the following principles is a prerequisite:
	+	* Persons who are admitted to an institution are assigned a digital identity.
	+	* Identities are assigned attributes that correspond to the person's current role.
	+	* If a person's role or authorizations are changed, the identity information is adjusted promptly.
	+	* For people who leave the institution, the identity with all rights and roles is promptly deleted or changed (e.g. students -> alumni).
	+	* The common [[de:attributes\|attribute schemas]] of the DFN-AAI must be supported.
	+	* The resource provider (service provider) can rely on all changes being carried out promptly.
	+	* The processes must be documented in writing to the extent that the security level can be derived from the documentation.
	+	See also under [[de:aai:assurance\|Identity Assurance]].
	+
	+	===== History of the DFN-AAI =====
	+	The motivation to create an AAI for the German university and research community goes back to the BMBF-funded [[http://aar.ub.uni-freiburg.de/dokumente/praesentationen.php\|AAR project]] (authentication, authorization and rights management), which started in 2005. The main aim of the project was to enable web SSO access to licensed electronic content (journals, databases, books, etc.), which offers significant advantages over conventional methods of access protection (IP control, VPN, proxies). In the fall of 2007, the DFN-AAI was put into regular operation and has since been available to DFN users as a so-called value-added service.
	+	Initially, the university libraries were the driving force behind the DFN-AAI, but other areas of application were quickly added: distribution of licensed software, internal university services ([[de:metadata_local\|local SP]]) and various e-learning platforms. At the latest with the emergence of federated (i.e. AAI-capable) HPC, storage, communication (web conferencing) and campus services, university data centers also developed an interest in the operation of AAI-relevant components and local services.
	+	In recent years, various state projects and initiatives such as bwIDM, the Bavarian Virtual University (VHB), Nds-AAI, SaxID, Ministries of Education and Cultural Affairs and others have established themselves as additional players, each making their services available at state level. With international research networks and infrastructures that want to offer and use their services [[de:edugain\|cross-federation (eduGAIN)]], the DFN-AAI has gained another important target group in recent years, whose needs pose new challenges for the traditional AAI. Examples include CLARIN (language resources), DARIAH (humanities), ELIXIR (life sciences) and LIGO (gravitational wave research).

assurance

Anonymous (anonymous@undisclosed.example.com) — 2024-07-08T08:11:18+00:00

2023/01/12 19:21		aktuell
Zeile 7:		Zeile 7:
	The [[https://refeds.org/assurance\|REFEDS Assurance Framework]] defines how identity assurance information can be transported via values of the [[de:common_attributes#a14\|eduPersonAssurance]] attribute. It enables service providers to address particularly relevant reliability criteria separately (if necessary), depending on individual protection requirements. As a internationally recognized standard, the [[https://refeds.org/assurance\|REFEDS Assurance Framework]] is a key factor for the connectivity of the DFN-AAI in the international context. This particularly concerns the support of research communities that depend on cross-federation collaboration via [[https://wiki.geant.org/display/eduGAIN/\|eduGAIN]].		The [[https://refeds.org/assurance\|REFEDS Assurance Framework]] defines how identity assurance information can be transported via values of the [[de:common_attributes#a14\|eduPersonAssurance]] attribute. It enables service providers to address particularly relevant reliability criteria separately (if necessary), depending on individual protection requirements. As a internationally recognized standard, the [[https://refeds.org/assurance\|REFEDS Assurance Framework]] is a key factor for the connectivity of the DFN-AAI in the international context. This particularly concerns the support of research communities that depend on cross-federation collaboration via [[https://wiki.geant.org/display/eduGAIN/\|eduGAIN]].

-	A more detailed presentation (in German) of the facts can be found in [[https://www2.dfn.de/fileadmin/5Presse/DFNMitteilungen/DFN_Mitteilungen_100.pdf\|DFN-Mitteilungen Nr. 100]] starting on page 42.	+	A more detailed presentation (in German) of the facts can be found in [[https://download.aai.dfn.de/publikationen/dfn-mitteilungen/DFN-Mitteilungen-100.pdf\|DFN-Mitteilungen Nr. 100]] starting on page 42.

	===== Information for Identity Providers =====		===== Information for Identity Providers =====

assurance_sp

Anonymous (anonymous@undisclosed.example.com) — 2024-01-21T12:46:27+00:00

2024/01/21 13:42		aktuell
Zeile 23:		Zeile 23:
	ShibRequestSetting requireSession true		ShibRequestSetting requireSession true
	<RequireAll>		<RequireAll>
		+	Require shib-attr assurance https://refeds.org/assurance/IAP/medium
		+	Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m
		+	</RequireAll>
		+	</Location>
		+	</file>
		+
		+	As above - and the Service Provider only accepts the REFEDS Assurance Framework version 2.0.
		+
		+	<file apache /etc/apache2/sites-enabled/sp.uni-beispiel.de.conf>
		+	<Location /protected>
		+	AuthType shibboleth
		+	ShibRequestSetting requireSession true
		+	<RequireAll>
		+	Require shib-attr assurance https://refeds.org/assurance/version/2
	Require shib-attr assurance https://refeds.org/assurance/IAP/medium		Require shib-attr assurance https://refeds.org/assurance/IAP/medium
	Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m		Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m

attributes_best_practice

Anonymous (anonymous@undisclosed.example.com) — 2021-12-14T17:11:41+00:00

2021/12/14 18:10		aktuell
Zeile 23:		Zeile 23:
	\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|		\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|
	^ 5. Other attributes that have to be defined (Attribute Resolver) ^^		^ 5. Other attributes that have to be defined (Attribute Resolver) ^^
-	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]], [[de:aai:assurance_idp\|configuration examples]] \|	+	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]] and [[de:aai:assurance_idp\|configuration examples for IdPs]] \|
	\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|		\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|
	\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|		\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|

contact

Anonymous (anonymous@undisclosed.example.com) — 2021-08-06T13:59:07+00:00

2021/08/06 15:47		aktuell
Zeile 7:		Zeile 7:
	Please note: The DFN-AAI hotline only provides support for questions concerning the federation in general as well as installation and configuration of SAML-enabled software with a main focus on Shibboleth. Due to the variety of possible implementation scenarios, no direct support can be provided for other kinds of web applications and IDM systems. Via the [[de:aai:mailinglists\|mailing lists]], federation participants may exchange their experiences.		Please note: The DFN-AAI hotline only provides support for questions concerning the federation in general as well as installation and configuration of SAML-enabled software with a main focus on Shibboleth. Due to the variety of possible implementation scenarios, no direct support can be provided for other kinds of web applications and IDM systems. Via the [[de:aai:mailinglists\|mailing lists]], federation participants may exchange their experiences.

-	Before submitting a support request, please check whether the question or problem is not already dealt with on the [[en:aai:faqs\|FAQ pages]] or the [[en:shibidp:troubleshooting\|Troubleshooting page]]. Thank you very much!	+	Before submitting a support request, please check whether the question or problem is not already dealt with on the [[en:aai:faqs\|FAQ]] or the [[en:shibidp:troubleshooting\|Troubleshooting]] pages. Thank you very much!

	==== Administrative Contact ====		==== Administrative Contact ====

faqs

Anonymous (anonymous@undisclosed.example.com) — 2021-07-27T06:25:05+00:00

2021/07/20 12:03		aktuell
Zeile 3:		Zeile 3:
	===== General questions =====		===== General questions =====

		+	* Where can I subscribe to DFN-AAI announcements? Please subscribe to this bilingual channel: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]].
		+	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?
	* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication		* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication
	* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]		* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]
Zeile 8:		Zeile 10:
	* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]		* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]
	* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?		* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?
-	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?	+	* Where can I get in touch with other DFN-AAI participants? On this mailing list: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|dfn-aai-users@listserv.dfn.de]] (mostly but not only in German language).
	* Privacy / Data Protection (upcoming)		* Privacy / Data Protection (upcoming)

incidentresponse

Anonymous (anonymous@undisclosed.example.com) — 2019-07-18T14:02:23+00:00

2019/07/18 11:53		aktuell
Zeile 1:		Zeile 1:
	====== Incident Response ======		====== Incident Response ======

-	In case of security incidents that may affect other federation participants, please contact the DFN-AAI security team: [[security@aai.dfn.de\|]], phone: +49-40-808077-590	+	In case of security incidents that may affect other federation participants, please contact the DFN-AAI security team: \\
		+	[[security@aai.dfn.de\|]] \\
		+	phone: +49-40-808077-590

	We kindly ask all IdP and SP operators to provide a [[https://wiki.refeds.org/display/SIRTFI/Choosing+a+Sirtfi+Contact\|Security Contact (email)]] in the DFN-AAI metadata administration tool and to follow the recommendations of the Sirtfi Framework. Please refer to [[https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home\|https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home]]		We kindly ask all IdP and SP operators to provide a [[https://wiki.refeds.org/display/SIRTFI/Choosing+a+Sirtfi+Contact\|Security Contact (email)]] in the DFN-AAI metadata administration tool and to follow the recommendations of the Sirtfi Framework. Please refer to [[https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home\|https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home]]

mailinglists

Anonymous (anonymous@undisclosed.example.com) — 2021-03-04T07:27:47+00:00

2026/04/29 22:10	aktuell
Zeile 1:	Zeile 1:
	+	~~NOTOC~~
	+	====== Mailing lists ======
	+	===== DFN-AAI =====
	+	DFN-AAI runs two mailing lists, one for information and one for community discussions:
	+	\| dfn-aai-announce@listserv.dfn.de \| Announcements concerning the federation, security issues, software updates, etc. (bilingual)\| [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|Subscribe]] \|
	+	\| dfn-aai-users@listserv.dfn.de \| Discussions and support within DFN-AAI community (mostly in German) \| [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|Subscribe]] \|
	+	We recommend to subscribe at least to [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]] so that we can inform you about security issues, policy changes and other technical or organizational measures.

	+	===== Shibboleth =====
	+	See https://wiki.shibboleth.net/confluence/display/WEB/Mailing+Lists
	+	* Announce, announce@shibboleth.net
	+	* Users, users@shibboleth.net
	+	* Dev, dev@shibboleth.net
	+	We recommend to subscribe at least to [[announce-subscribe@shibboleth.net\|announce@shibboleth.net]] to stay informed about new software versions and security updates.

mdq

Anonymous (anonymous@undisclosed.example.com) — 2024-02-02T08:44:18+00:00

2023/01/12 19:31		aktuell
Zeile 20:		Zeile 20:

	Certificate for the validation of the signature of DFN-AAI MDQ Metadata (PEM format) \\		Certificate for the validation of the signature of DFN-AAI MDQ Metadata (PEM format) \\
-	SHA256 Fingerprint: 73:5B:9E:76:8A:A6:33:73:4D:3E:C6:D2:1E:98:B3:D9:03:74:B9:87:16:52:16:53:32:26:9A:B2:55:FC:CA:D2 \\	+	SHA256 Fingerprint: 75:18:98:F6:E8:23:21:E8:B1:DC:71:6B:D0:AB:50:F0:C2:DB:9D:CE:4B:2B:A1:88:B1:42:DB:99:13:DB:0D:E9 \\
	https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem		https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem

portfolio

Anonymous (anonymous@undisclosed.example.com) — 2024-07-07T13:49:29+00:00

2024/01/15 16:00		aktuell
Zeile 20:		Zeile 20:
	* Support of international research communities: [[https://fim4r.org/\|FIM4R]], [[https://www.clarin.eu/\|CLARIN]] etc.		* Support of international research communities: [[https://fim4r.org/\|FIM4R]], [[https://www.clarin.eu/\|CLARIN]] etc.
	Involvement of the user community in the design and further development of the service		Involvement of the user community in the design and further development of the service
-	* AAI forum as part of the [[https://www2.dfn.de/veranstaltungen/betriebstagungen/\|DFN-Betriebstagung]]	+	* AAI forum as part of the [[https://www.dfn.de/news/veranstaltungen/\|DFN-Betriebstagung]]
	* Participation in the [[https://www.zki.de/ueber-den-zki/vereinsstruktur/identity-und-access-management/\|ZKI working group Identity and Access Management]]		* Participation in the [[https://www.zki.de/ueber-den-zki/vereinsstruktur/identity-und-access-management/\|ZKI working group Identity and Access Management]]
	* Topic-specific ad-hoc working groups		* Topic-specific ad-hoc working groups
	Further development of the service on a technical, organizational and legal level:		Further development of the service on a technical, organizational and legal level:
-	* Regular consultations with the [[https://www2.dfn.de/rechtimdfn/\|Forschungsstelle Recht im DFN]]	+	* Regular consultations with the [[https://recht.dfn.de\|Forschungsstelle Recht im DFN]]
	* Support for new technologies and standards such as [[https://openid.net/connect/\|OpenID Connect]], membership in the [[https://openid.net/foundation/\|OpenID Foundation]], participation in the [[https://openid.net/wg/rande/\|Research & Education Working Group]]		* Support for new technologies and standards such as [[https://openid.net/connect/\|OpenID Connect]], membership in the [[https://openid.net/foundation/\|OpenID Foundation]], participation in the [[https://openid.net/wg/rande/\|Research & Education Working Group]]
	* Expansion of the service portfolio, e.g. [[de:aai:eduid\|edu-ID]]		* Expansion of the service portfolio, e.g. [[de:aai:eduid\|edu-ID]]
	* Evaluation of new approaches to increase the level of trust in the DFN-AAI, introduction of the [[https://refeds.org/assurance\|REFEDS Assurance Framework]]		* Evaluation of new approaches to increase the level of trust in the DFN-AAI, introduction of the [[https://refeds.org/assurance\|REFEDS Assurance Framework]]

2021/12/14 18:10		aktuell
Zeile 23:		Zeile 23:
	\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|		\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|
	^ 5. Other attributes that have to be defined (Attribute Resolver) ^^		^ 5. Other attributes that have to be defined (Attribute Resolver) ^^
-	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]], [[de:aai:assurance_idp\|configuration examples]] \|	+	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]] and [[de:aai:assurance_idp\|configuration examples for IdPs]] \|
	\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|		\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|
	\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|		\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|

2021/07/20 12:03		aktuell
Zeile 3:		Zeile 3:
	===== General questions =====		===== General questions =====

		+	* Where can I subscribe to DFN-AAI announcements? Please subscribe to this bilingual channel: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]].
		+	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?
	* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication		* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication
	* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]		* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]
Zeile 8:		Zeile 10:
	* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]		* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]
	* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?		* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?
-	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?	+	* Where can I get in touch with other DFN-AAI participants? On this mailing list: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|dfn-aai-users@listserv.dfn.de]] (mostly but not only in German language).
	* Privacy / Data Protection (upcoming)		* Privacy / Data Protection (upcoming)

2024/01/15 16:00		aktuell
Zeile 20:		Zeile 20:
	* Support of international research communities: [[https://fim4r.org/\|FIM4R]], [[https://www.clarin.eu/\|CLARIN]] etc.		* Support of international research communities: [[https://fim4r.org/\|FIM4R]], [[https://www.clarin.eu/\|CLARIN]] etc.
	Involvement of the user community in the design and further development of the service		Involvement of the user community in the design and further development of the service
-	* AAI forum as part of the [[https://www2.dfn.de/veranstaltungen/betriebstagungen/\|DFN-Betriebstagung]]	+	* AAI forum as part of the [[https://www.dfn.de/news/veranstaltungen/\|DFN-Betriebstagung]]
	* Participation in the [[https://www.zki.de/ueber-den-zki/vereinsstruktur/identity-und-access-management/\|ZKI working group Identity and Access Management]]		* Participation in the [[https://www.zki.de/ueber-den-zki/vereinsstruktur/identity-und-access-management/\|ZKI working group Identity and Access Management]]
	* Topic-specific ad-hoc working groups		* Topic-specific ad-hoc working groups
	Further development of the service on a technical, organizational and legal level:		Further development of the service on a technical, organizational and legal level:
-	* Regular consultations with the [[https://www2.dfn.de/rechtimdfn/\|Forschungsstelle Recht im DFN]]	+	* Regular consultations with the [[https://recht.dfn.de\|Forschungsstelle Recht im DFN]]
	* Support for new technologies and standards such as [[https://openid.net/connect/\|OpenID Connect]], membership in the [[https://openid.net/foundation/\|OpenID Foundation]], participation in the [[https://openid.net/wg/rande/\|Research & Education Working Group]]		* Support for new technologies and standards such as [[https://openid.net/connect/\|OpenID Connect]], membership in the [[https://openid.net/foundation/\|OpenID Foundation]], participation in the [[https://openid.net/wg/rande/\|Research & Education Working Group]]
	* Expansion of the service portfolio, e.g. [[de:aai:eduid\|edu-ID]]		* Expansion of the service portfolio, e.g. [[de:aai:eduid\|edu-ID]]
	* Evaluation of new approaches to increase the level of trust in the DFN-AAI, introduction of the [[https://refeds.org/assurance\|REFEDS Assurance Framework]]		* Evaluation of new approaches to increase the level of trust in the DFN-AAI, introduction of the [[https://refeds.org/assurance\|REFEDS Assurance Framework]]