GÉANT-TrustBroker​

New Federation Services and Protocols for Dynamically Building Trust in the R&E Community

Participants:

Bavarian Academy of Sciences and Humanities - Leibniz Supercomputing Centre

Objective:

The specification of a new service for large-scale authentication and authorisation infrastructures.

Approach:

GÉANT-TrustBroker will allow users (not only site administrators) to initiate the first-time contact between service providers (SPs) and the users’ identity providers (IDPs) in order to perform the required preparations for identity data exchange in a fully automated manner. GÉANT-TrustBroker will also solve the real-world challenge of inter-federation identity data transformation by hosting a smart data conversion rule repository. GÉANT-TrustBroker will be integrated into SAML workflows so it can be used with widely deployed software packages e.g. Shibboleth, and the protocols for accessing the GÉANT-TrustBroker will be submitted for standardization to the IETF or OASIS.

Impact:

GÉANT-TrustBroker makes it easy to set up web-based collaboration applications for scientific communities that can be used across national borders, without the trouble of managing users and their permissions manually.

Deliverable:

To view the final report of this Open Call project visit the resources library.

Resources: