- FIM4L - lists3.daasi.de

eduGAIN Steering Committee nominations
by Nicole Harris 28 Nov '23

28 Nov '23

Dear all Many thanks for all the nomination that we have received for the eduGAIN Steering Committee positions. We have received a really great slate of nominations to put for vote, however the eduGAIN Steering Committee Terms of Reference states that "the eduGAIN Secretariat will ensure that the slate of nominees is diverse and representative of the eduGAIN community" and we would like to exercise that obligation before moving to vote. We believe that the voting process could benefit from broader representation in the following fields: * Gender diversity. At the moment we only have one female nominee and believe this is not reflective of the community this committee seeks to represent. * Representation from Africa. We currently do not have a nominee from this region and would like to see that represented. * Non-federation operator nominees. As the community specifically asked us to ensure that non-federation operators were represented in decision making, we would like to increase the number of nominees in this space. As such I am extending the nominations period until 17:00 CET on Friday 1st December to invite nominations that meet these under-represented groups. Please do consider helping us address this balance. Many thanks Nicole -- Nicole Harris Senior Trust and Security Manager GÉANT T: +31 (0) 20 530 4488 M: +31 (0) 646 105395 Skype: harrisnv PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216 Networks • Services • People Learn more atwww.geant.org GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

1 0

Fwd: [refeds] REFEDS Steering Committee Nominations now open - 2024-2026
by Nicole Harris 10 Nov '23

10 Nov '23

Dear All Please see below - REFEDS SC member proposals are welcome from anyone with an interest in the identity federation space. Many thanks Nicole -------- Forwarded Message -------- Subject: [refeds] REFEDS Steering Committee Nominations now open - 2024-2026 Date: Thu, 9 Nov 2023 13:29:32 -0800 From: Heather Flanagan <hlf(a)sphericalcowconsulting.com> Reply-To: refeds(a)lists.refeds.org To: refeds(a)lists.refeds.org Hello REFEDS participants! It's that time of year where the terms of about half of our Steering Committee (SC) members are open to nominations for new members or renewals for existing members. As announced at the recent REFEDS meeting, Christoph Graf will be stepping into the SC role opened with Thomas Bärecke's departure. AS Thomas' term ended this year, Christoph's term will cover the 2024-2026 term. The terms for Pål Axelsson and Maarten Kremers are also up this year. Pål has indicated a willingness to continue to serve on the SC, but Maarten is stepping down. We would love to increase the diversity of the SC, including broader geographic participation, sector experience (e.g., VO, RP, IdP, other), and other demographics. *If you know someone who would be a good representative on the SC, please submit their name to Nicole Harris or myself by 15 December 2023. * If you have any questions about the nomination process, qualifications, or responsibilities, please see the REFEDS Participant's Agreement <https://refeds.org/about/participants> (an excerpt is included below). Thank you for your engagement and interest! --- From the REFEDS Participant's Agreement <https://refeds.org/about/participants>: *7. REFEDS Steering Committee* The REFEDS Steering Committee consists of six members, who are appointed for a two-year term of office. When there are vacancies in the REFEDS Steering Committee, the REFEDS Participants nominate candidates to fill these vacancies. Each candidate must be supported by at least one sponsor. These are announced on the general REFEDS mailing list and the REFEDS Secretariat takes into account any comments received before taking the final decision about the appointments. The REFEDS Steering Committee oversees the execution of the annual workplan and proposes agenda items for the semi-annual general REFEDS meetings. It also provides input to the REFEDS secretariat when the workplan for the next year is drafted. The Steering Committee may produce an evaluation of the work carried out in the past year and its results, which is then sent to the REFEDS Sponsors and published on the REFEDS website together with the annual report. The REFEDS Steering Committee monitors the execution of the annual workplan; if it is of the opinion that insufficient progress is made in a particular (sub-)work-item, it may decide to freeze the execution of that (sub-)work-item until the next semi-annual general REFEDS meeting, where it then proposes to delete that (sub-)work-item from the workplan. The REFEDS Steering Committee may propose to include a new (sub)work-item in the workplan of the running year. Such a proposal will be submitted for decision taking by ‘rough consensus’ to the next semi-annual general REFEDS meeting, or if that is not possible, to the general REFEDS mailing list. If contributions from REFEDS Sponsors are required, they will also be consulted about the proposal. Heather Flanagan Principal, Spherical Cow Consulting Founder, The Writer’s Comfort Zone <http://linkedin.com/in/hlflanagan/> <http://twitter.com/sphcow> Translator of Geek to Human hlf(a)sphericalcowconsulting.com <mailto:hlf@sphericalcowconsulting.com> ‌

1 0

Announcement: new eduGAIN Constitution and call for nominations
by Casper Dreef 08 Nov '23

08 Nov '23

Dear eduGAIN community, It is with great pleasure to announce that the new eduGAIN Constitution <https://wiki.geant.org/download/attachments/633275632/eduGAIN-Constitution-…>was ratified by the GÉANT Association’s Board on the October 3rd. After being approved by the eduGAIN Steering Group, this was the final step in the process. The new Constitution will come into effect as of January 1st 2024. This also means that the eduGAIN service will have a new governance model, as described in the Constitution and here <https://wiki.geant.org/display/eduGAIN/eduGAIN+and+REFEDS+Town+Hall+2023?pr…>. In the model there will be a new governance body, called the eduGAIN Steering Committee that will have an oversight role in the eduGAIN service. For the full description of the roles and responsibilities of the eduGAIN Steering Committee please read the Terms of Reference: https://wiki.geant.org/download/attachments/633275634/eduGAIN-Steering-Comm… Please note that 4 seats on the Steering Committee are reserved for eduGAIN Delegates or Deputies and one seat for the eduGAIN Service Owner. The two remaining seats are open to the broader eduGAIN community. The call for nominees is now open until Friday 24 November 23:59CET. You can send your nominations to support(a)edugain.org <mailto:support@edugain.org>. If you have any questions regarding the Constitution and/or the new Steering Committee, please feel free to contact the eduGAIN secretariat. Best regards, Casper Dreef On behalf of the eduGAIN secretariat

1 1

REFEDS Steering Committee Membership
by Nicole Harris 05 Jan '23

05 Jan '23

Dear All As we start the new year, it is time to open nominations for seats on the REFEDS Steering Committee. We have three seats up for new terms - a reminder that there are no term limits for the REFEDS SC so existing members are welcome to run again. The full details are here: https://refeds.org/about/participants <https://refeds.org/about/participants>. Nominees must be supported by a sponsor, but we will take care of sharing any nominations with the sponsor list. We are always keen to have members from all parties interested in REFEDS so I am sharing this with FIM4R and FIM4L - please feel free to share on! If you have any questions please let me know, otherwise please send your nominations or self nominations to either me or Heather. We look forward to hearing from you! Nicole -- Nicole Harris Senior Trust and Security Manager GÉANT T: +31 (0) 20 530 4488 M: +31 (0) 646 105395 Skype: harrisnv PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216 Networks • Services • People Learn more at www.geant.org GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

1 0

FIM4L Newsletter December 2022
by Jos Westerbeke 09 Dez '22

09 Dez '22

Dear all, Hereby the latest news from the FIM4L working group. We have published our second version of the recommendations this year. After a public consultation and a final edit we were able to publish it last November on Zenodo<https://zenodo.org/record/7313371>. This version is aligned with the REFEDS namings of entity categories. And especially the main principle 4 is improved and updated to latest developments. Please share it in your networks. Earlier this year we had a series of three talks with Elsevier where we looked for the possibility of what we called "agile access", meaning that you can choose whether to have pseudonymous or anonymous access. Right on the spot/website and whenever you want. That's a hard question. But the talks gave us very interesting findings. You can read this here on this blogpost of LIBER<https://libereurope.eu/article/fim4l-working-group-in-talks-with-elsevier-t…>. Last week Jiri and I presented a live log-in show at the LIBER Winter Event<https://libereurope.eu/eventscalendar/liber-winter-event/> in Amsterdam. This was meant for LIBER members, especially of working groups. We showed the login behavior of Elsevier ScienceDirect and EBSCOhost. And we showed the possibilities of "agile" (pseudonymous/anonymous) login, and background processes. It's worth it to report on this. Perhaps a blogpost will follow. Keep up with our LIBER Working Group website to follow the news<https://libereurope.eu/working-group/liber-fim4l-working-group/news/> and soon find a link to at least the presentation. I wish you all a lovely Holiday season! Jos ---------- FIM4L<https://www.fim4l.org/> is a non-profit initiative led by libraries with the main purpose of creating and maintaining recommendations for configuring federated SSO authentication for library e-resources in the most privacy preserving way. It has a working group<https://libereurope.eu/working-group/liber-fim4l-working-group/> under the umbrella of LIBER<https://libereurope.eu/working-group/liber-fim4l-working-group/>, currently the base of FIM4L. FIM4L recommendations are published at the FIM4L website<https://www.fim4l.org/?page_id=257> and the Zenodo<https://zenodo.org/record/7313371> platform. Please join our Mailing List<https://lists.daasi.de/listinfo/fim4l> for information and discussions. Jos Westerbeke Library IT and e-resource access manager | Erasmus University Rotterdam | www.eur.nl/library | jos.westerbeke(a)eur.nl | +31 640295513

1 0

eduGAIN Futures Working Group recommendations
by Nicole Harris 08 Jul '22

08 Jul '22

Dear All Firstly, apologies for the noise - we wanted to make sure we were reaching as many of the relevant stakeholder groups as possible with this consultation. Please feel free to send on anywhere I may not have considered. As presented at the last eduGAIN Steering Group meeting and at the REFEDS meeting in Trieste, the eduGAIN Futures Working Group has produced its first draft paper on recommendations for changes to eduGAIN to address service models, governance models and the need to meet the REFEDS Baseline Expectations specification. Details of the consultation can be found here: https://wiki.geant.org/display/eduGAIN/eduGAIN+Futures+Working+Group+Report… <https://wiki.geant.org/display/eduGAIN/eduGAIN+Futures+Working+Group+Report…>. If you have any questions please do not hesitate to reach out to myself of Casper. With kind regards Nicole -- Nicole Harris Head of Trust and Identity Operations GÉANT T: +31 (0) 20 530 4488 M: +31 (0) 646 105395 Skype: harrisnv PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216 Networks • Services • People Learn more at www.geant.org GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

1 1

Blogpost published
by Jos Westerbeke 23 Jun '22

23 Jun '22

Hi all, We have published the blogpost about our talks with Elsevier: https://libereurope.eu/article/fim4l-working-group-in-talks-with-elsevier-t… I think it will point to the direction we are heading. Pseudonym as recommended identifier and contractual language to support privacy protection. I'm curious about your thoughts! All the best, Jos

2 1

Conclusions of talks Elsevier and FIM4L
by Jos Westerbeke 01 Jun '22

01 Jun '22

Hi all, The LIBER Working Group<https://libereurope.eu/working-group/liber-fim4l-working-group/> is happy to share with you an update of our latest talks with Elsevier. Comments are welcome! As a next step we would like to create a blogpost of this on the LIBER website. All the best, Jos --- Conclusions of talks Elsevier and FIM4L In the beginning of 2022 FIM4L and Elsevier has held a series of talks about federated access. (3/8/2022, 3/31/2022 and 5/9/2022). This update is intended to provide the FIM4L community with the topics we’ve been discussing and identify some of the challenges and opportunities ahead. The concept of 'agile' federated access In these talks FIM4L presented the technical possibilities about releasing a variety of attributes during the login process. The concept is called "agile" and is based on the CAR system from Duke University. CAR implements informed Consent Attribute Release. With this in place a user is able to approve or deny the release of every attribute at the login phase. The possibility whether or not to release a persistent identifier, also known as a pseudonymous identifier, implies great consequences. This shaped the main theme of the talks. This concept provided the choice for a user to remain anonymous, pseudonymous or personally identified during the federated login process and hence at the publisher's platform. A live showcase of this concept was shown by Rob Carter from Duke University [1] by using the CAR system to block parsing the pseudonymous identifier to the Elsevier Sciencedirect platform. The results were technically all fine. Everything worked as expected. Anonymous login and user experience A major topic has been considering different user journeys, as users can arrive via different paths and with different identities, but expect a unified experience. Several problems across the Elsevier platforms arise when users login without a pseudonymous identifier, meaning anonymous. We regarded Elsevier as a complex publisher with many features and possibilities in place. It has different services, like ScienceDirect and Scopus, but also Mendeley as a public service for which personal login is required. Other on-line content providers typically offer a simpler platform for managing privacy. In this regard, Elsevier offers an excellent opportunity to investigate interactions between identity and anonymity. Points of considerations for anonymous login: * Not all Elsevier products support anonymity. * If an anonymous logged-in user decides to set up alerts at e.g. Sciencedirect, he will be informed that he should login first. Then he probably creates a new user account, perhaps apart from an existing one, and his current session gets terminated. * When an identified user logs out, he cannot login anymore as anonymous in that session. If anonymous login would be officially supported by a publisher, then it's important to inform a user using very clear communication. This is hard for two reasons: Users don't understand these login differences and there always remain cases for a users' journey on a platform where a user could not be informed at all. Building trust Given these and many other difficulties of anonymous login, a basic reason should be very clear given why anonymous login is needed at all. First answer is because of the library's principle that it must be possible to conduct research anonymously. But most users are fine with a good trust relationship between library and publisher. Only for a few most critical users the question of anonymity will remain. And that question will remain anyway. And for a good reason, because anonymity on the internet is even impossible. If a pseudonymous identifier for the user is far more convenient and technically preferable, is there a way to create a trust relationship and options for the user to be explicitly anonymous for the publisher if the user requires that? Given the talks, this question seems to lay down the most viable path to go. Some considerations for pseudonymous login: There should be a common trust relationship between library and publisher. And users. This can be achieved by: * Contract language * Technical transparency * Creating user awareness (Anonymous isn't possible anyway.) The library should advocate anonymity to the publisher and this should not stop by SAML or other authentication methods. The publisher has more data and therefore more responsibility than the library. Even when a user comes anonymous from the library, in the publisher's system things could change. It should be beneficial to have a code of conduct besides the technical solution. A general template data processing agreement (DPA) which libraries can use for publishers seems to be a good idea. Technical transparency could support a trust relationship. Besides a library-publisher relationship the library should provide more guidelines for its users when she wants her users to have an anonymous (as much as possible) research journey. Libraries have had a major role, historically, in educating users on issues of privacy and this is another such opportunity. Browser related recommendations could be part of it. A remaining question seems to be the following. A publisher has many mechanisms to track users for good reasons. Is it possible for an authenticated user to opt-out from a personalized session and to get into an anonymous session? If a publisher can provide this, it would align with the libraries' principle that a user should have the ability to conduct research anonymously. We also want to note another consideration in offering a variety of access choices - the opportunity to educate users on the tradeoffs between attribute release and access models. In addition, these choices provide a chance to illustrate the virtues of transparency in user interactions with content providers; the user gets to clearly see what is being shared and why. ______Endnotes_______ [1] This was recorded during the meeting. The video can be watched here<https://drive.google.com/file/d/1RtMJXf17WJQ0VM0AyEQ7oN7gyDlKdd_U/view?usp=…>. (3/8/2022)

1 0

Announcement: Public consultation of FIM4L's recommendations for federated access v2
by Jos Westerbeke 21 Mär '22

21 Mär '22

Dear all, The FIM4L Working Group<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flibereuro…> is pleased to announce a new public consultation available — Federated Access to Online Resources: Principles & Recommendations for Library Services, version 2. If you're interested in e-resources at research libraries and want to join in on the conversation, have your say before the end of April 2022 here<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flibereuro…>. Kind regards, Jos (And please share this message. #Library #FIM4L #e-resources #IdentityManagement #Privacy #LibraryAccess) Jos Westerbeke Library IT specialist/manager | Erasmus University Rotterdam | www.eur.nl/library | jos.westerbeke(a)eur.nl [cid:image001.png@01D81CF2.5B092920]<https://www.fim4l.org/> www.FIM4L.org<http://www.FIM4L.org>

3 2

FIM4L newsletter
by Jos Westerbeke 18 Mär '22

18 Mär '22

Dear everyone, We are happy to share some updates of the FIM4L working group. At this moment we are consulting the public for our second version of the recommendations. Please take a look at it and have your say here<https://owncloud.cesnet.cz/index.php/apps/onlyoffice/s/27B07fiGu7EnNaf?file…>. It's open until the end of April. You're encouraged to share this link<https://libereurope.eu/working-group/liber-fim4l-working-group/publicconsul…> on your social media platforms. LIBER is about to announce its new strategy for the period of 2023-2027. The FIM4L working group will be extended and we thank LIBER for having us working on the library's interests of "managing the privacy of users when they access library e-resources." As you can read on the Working group's webpage<https://libereurope.eu/working-group/liber-fim4l-working-group/>. We are exploring the idea of an 'agile' entity category. Agile means anonymous, pseudonymous, or personalized access according to released attributes. This gives the ability to implement a user consent system. We have tested this with the CAR system of Duke University and ScienceDirect platform of Elsevier. The first results are looking good. We have talks with Elsevier to work further on this. If you want to join the FIM4L working group and attend our meetings, please let me know. Also, if you want to attend just a meeting, please let me know. You're welcome! (2 weekly on Tuesdays 16:00 hr, CET. Next meeting: March 22nd.) Kind regards, Jos ---------- FIM4L<https://www.fim4l.org/> is a non-profit initiative led by libraries with the main purpose of creating and maintaining recommendations for configuring federated SSO authentication for library e-resources in the most privacy preserving way. It has a working group<https://libereurope.eu/working-group/liber-fim4l-working-group/> under the umbrella of LIBER<https://libereurope.eu/working-group/liber-fim4l-working-group/>, currently the base of FIM4L. FIM4L recommendations are published at the FIM4L website<https://www.fim4l.org/?page_id=257> and the Zenodo<https://zenodo.org/record/4118124#.X5GqWUIzblx> platform. Please join our Mailing List<https://lists.daasi.de/listinfo/fim4l> for information and discussions. ---------- Jos Westerbeke Library IT specialist/manager | Erasmus University Rotterdam | www.eur.nl/library | jos.westerbeke(a)eur.nl

1 0