Hi everyone,
I’m looking for input on how we can better handle the following situation:
IGTF Personal Certificates are used for user authentication in collaborations between CERN and Norwegian universities. To enable certificate issuance, Identity Providers in eduGAIN must release certain attributes—most importantly, eduPersonPrincipalName, which GEANT requires for IGTF Personal Certificates [1].
However, HARICA does not currently require this attribute, and Feide cannot release attributes that are not explicitly required. As a result, Sikt is unable to provide IGTF Personal Certificates to our customers.
The latest update we received from HARICA (on September 19) was:
"This change is already in our plans, but we are also looking to introduce the 'subject-ID' attribute, which appears to be the optimal one for identity mapping. We are discussing internally how to prioritize this over other requested features."
For now, we are implementing a workaround for Norwegian universities, but it’s disappointing that a certificate provider operating under a GEANT contract does not already support this.
How can we apply more pressure on HARICA to prioritize this change?
[1] https://wiki.geant.org/pages/viewpage.action?spaceKey=TCSNT&title=TCS+2025+…
Thanks for any ideas—and wishing you all a great weekend ahead!
Hildegunn
Dear all,
I hope you are all well.
I would like to touch base with you with regards to the CTO T&I Workshop that will take place in Amsterdam at the end of the month:
https://events.geant.org/event/1844/
I pinged GEANT and I understand that the goal is to review the work done in 2025 to execute the "Trust and Identity Strategy 2025-2027”.
GEANT will share more material soon.
Will each of the Nordics be represented during the meeting? If not, would you like any other Nordic being there to report anything?
Would you like to have a call before or after the CTO workshop?
Best,
Licia
------
Licia Florio - Senior Strategy and Policy Officer, NORDUnet
Phone: +31653928443
Data protection policy: https://nordu.net/privacy-policy/
Legal notice: https://nordu.net/legal-notice/
