Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FedCM for Research and Education #12

Open
ekupris opened this issue Apr 30, 2024 · 0 comments
Open

FedCM for Research and Education #12

ekupris opened this issue Apr 30, 2024 · 0 comments

Comments

@ekupris
Copy link

ekupris commented Apr 30, 2024

Background

We (@ekupris and @tobiaspc) presented our research paper Automated Where Are You From at TDI/OSW 2024.
This issue is based on resulting discussions on how to integrate A-WAYF's functionality into FedCM.
It primarily addresses the application of FedCM in multilateral federations, e.g., in the research and education (R&E) sector.
However, it might also be relevant for other sectors, such as Open Banking.

Multilateral federations differ from bilateral ones in the following ways with regards to FedCM:

  • There can be thousands of IdPs that users can choose to authenticate with at an RP
  • Session lifetimes are usually short
  • Where Are You From/discovery services are used to find a user's home IdP
  • R&E IdPs usually do not offer a direct login page
  • RPs are not explicitly registered at the IdP

These differences directly relate to the issues and considerations presented below.
To avoid overloading this issue, we have divided it into several distinct sub-issues, each of which we discuss in detail.

Issues

FedCM's IdP registration, the "any"-mode, and the button mode were presented at OSW 2024.
These functionalities could be utilized to further accommodate R&E use-cases.
However, we believe that certain issues persist, and some of these could be addressed with our suggestions.

  • IdP filtering, so that only compatible ones are presented to the user: Issue 1
  • Organization Chooser, if there are multiple IdPs registered with no logged-in accounts Issue 2

Considerations for FedCM in R&E

While thinking of a PoC design of FedCM at our university IdP, we collected some considerations for the usage of FedCM in the R&E context:

  • Direct login at IdP via loginURL is usually not possible out of the box
  • RPs are not explicitly registered at the IdP, so receiving client metadata needs to be well thought out

They are described in detail in this issue: Issue 3

@samuelgoto samuelgoto transferred this issue from w3c-fedid/FedCM Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant