Current identity federations in the academic area are, with almost no exception, SAML2 based. There is however a strong and rising interest for using OpenID Connect as a protocol for identification and authentication. There is, however, no support for building federations in the basic standards of OpenID Connect, for identity federations as we know them currently in the academic area.
Roland Hedberg et al., have written a specification for creating an identity federation using OpenID Connect, hereby taking into account some lessons learned from the identity federations as we know them know.
The GN4-2 Trust & Identity Next Generation Technology task is taking the next step by further implementing and developing the specification, with as goal to create running implementations with the tools needed to run it as a federation and the creation of a technology profile for eduGAIN.
As the first set of milestones are set for June 2017, we want to gather with people involved in the GN4-2 project on this topic and with other interested participants in this work. This in order to review the first milestones and to get feedback and new ideas on the work from those participants who are not directly involved. Based on this we want to identify new possibilities to collaborate and to identify (new) work to be done.
More information:Â https://wiki.geant.org/display/gn42jra3/OIDCfed+Workshop+TNC17