- FIM4L - lists3.daasi.de

Fwd: [spog] REFEDS baseline expectations
by Heather Flanagan 03 Aug '20

03 Aug '20

Hola a todos! This message went out to the SP Operators Group (forwarded with permission). I think members of this list might find the proposed federation baselines to be of interest, and I strongly encourage you to go take a look and offer comments. Additional information (including links) is below. Heather Flanagan — Translator of Geek to Human https://sphericalcowconsulting.com ---------- Forwarded message ---------- From: Alan Buxey <alan.buxey(a)myunidays.com> Date: Jul 29, 2020, 8:29 AM -0700 To: spog(a)lists.refeds.org Subject: [spog] REFEDS baseline expectations > hi, > > > Federated Access offers users a way to access online content in secure > and privacy-preserving ways. Establishing a federated authentication > workflow for Research and Education (R&E), however, requires trusted > entities — R&E Identity Federations — to coordinate the necessary > Trust, Scalability, and Interoperability. To enable this coordination, > REFEDS (the Research and education Federations group, > https://refeds.org) has launched a Baseline working group. The goal of > this group is to create a minimal Baseline of technical and > operational behavior that the Identity Providers (IdPs), Services > Providers (SPs), and the Federation Operators themselves must follow. > This baseline would be enforced by the Federation Operators. We are > asking for your input to develop these baselines. > > > The Baseline working group has been active since spring this year and > has started to draft the REFEDS Baseline Expectations. These > expectations will be described in a group of documents, the first > being a high-level holistic document that defines the conceptual > framework of the Baseline Expectations. After the group has finished > with the holistic document, the working group will create additional > documents that describe how the expectations will be applied in more > detail for different federation technologies. > > > The Baseline Expectations working group has its home in the REFEDS wiki space: > > > https://wiki.refeds.org/display/GROUPS/Baseline+Expectations+Working+Group > > > For the Baseline Expectations to be successful, we require the > feedback and input of all stakeholders in the ecosystem. Service > Providers and their customers are asked to read the current draft > holistic Baseline Expectations to get an understanding of requirements > and expectations that will be put to them going forward: > > > https://docs.google.com/document/d/1u0XuvPRFKH5RaDEcgdp3jyfgNZbWAR4Q1yl0GzN… > > > We are particularly interested in knowing if these requirements are > sufficient, appropriate, and implementable, and if there are any gaps > in the expectations. > > > Whilst the REFEDS group is still working on the initial requirements > and documentation, we hope that the first Baseline target will align > fairly closely to what has already been achieved in the US with the > InCommon Federation , their initial Baseline document is here: > > > https://incommon.org/federation/baseline-expectations-for-trust-in-federati… > > If you are already an SP operating in InCommon, you will already be > aware of these requirements and have undertaken work and processes to > align to them. If not, please can you spend some time looking over > this document and provide your feedback/views and opinions on the > requirements and please feel free to expand with other requirements > that you would like to see in future Baseline versions (InCommon are > already working on their next level). > > > Regards, > > > Alan and Pål, REFEDS Baseline working group co-chairs

1 0

Question about library/publisher reporting
by Heather Flanagan 20 Jul '20

20 Jul '20

Hello FIM4L members! How many of you get reports from publishers on usage stats for billing purposes (maybe by using the COUNTER-SUSHI standards)? Have any of you done anything different to get this kind of information into a SAML workflow? A small group is spinning up in the REFEDS Schema area that’s discussing the possibilities here, and while we have publishers on hand to describe the use case, I was wondering what this might look like from the library perspective. Feedback and further information most welcome! Heather Flanagan — Translator of Geek to Human https://sphericalcowconsulting.com

4 8

Public Comments now open for new federated identity entity categories
by Heather Flanagan 08 Jul '20

08 Jul '20

Hello FIM4L! (Apologies if you are receiving this more than once; we will be cross-posting the announcement to several lists) In order to encourage the clear and consistent operation of federated authentication between Service Providers (such as scholarly publishers), Identity Providers (such as campus IT administrators), and other stakeholder groups (such as librarians), the SeamlessAccess Entity Categories and Attribute Bundles Working Group has proposed three specifications that aim to provide a common set of terms and definitions for use when describing exactly what information should be requested by the Service Provider as well as what should be released (if any) by the institution to enable access to online materials. These specifications, called Entity Categories, are offered to allow administrators of identity management systems to have easy-to-use configuration guidance that supports appropriate information sharing between parties. These entity categories also offer business units within the institution the opportunity to consider these descriptions as input into their contractual language with Service Providers. Because these entity categories impact the metadata managed by identity federations, SeamlessAccess has asked REFEDS, the Research and Education Federation community organization, to become the custodians for these entity categories. This includes running the consultation process and managing any subsequent changes to the specifications. NISO will be following this process as well, and will be co-signing these recommended practices as a part of their standards work and work as a member of the SeamlessAccess coalition. All stakeholders in the federated identity management ecosystem are encouraged to offer their comments during this consultation period. The three entity categories are: • Authentication Only - this use case covers authentication only; the Service Provider does not want any attributes (specific pieces of data about an authenticated user) from the Identity Provider, only a confirmation that the authentication was successful. • Anonymous Authorization - this use case supports authorization decisions through the sharing of additional information such as entitlement data (e.g., faculty versus student), while keeping the user completely anonymous to Service Providers. • Pseudonymous Authorization - this use case supports authentication, authorization, and allows for personalization per Service Provider through the sharing of a per-service user identifier without requesting any personal information such as name or email address. The public comment period starts on July 6, 2020, and will run for eight weeks until August 31, 2020. Information on how to participate in the consultation is here https://wiki.refeds.org/display/CON/Consultations+Home. Each entity category has its own consultation page. NISO will be hosting a webinar on Monday, August 10, 2020, at 10:00 a.m. EDT (14:00 UTC) geared towards librarians and publishers to discuss these entity categories; registration information is available here: http://www.niso.org/events/2020/08/seamless-access-presents-entity-categori…. Heather Flanagan — Translator of Geek to Human https://sphericalcowconsulting.com

1 0

New Educational Videos about the SeamlessAccess.org Service
by John Felts 23 Jun '20

23 Jun '20

SeamlessAccess is excited to announce the publication of the first in a series of videos designed to support learning and education around the SeamlessAccess service. A key part of our mission is to improve understanding of the technologies that support our SeamlessAccess experience. To date, a significant proportion of our outreach activity has been in-person presentations at meetings and conferences. Given the current circumstances, and our desire to engage audiences that don't have access to the same opportunities, we are developing a series of educational videos. The first two video titles focus on addressing questions and concerns about federated authentication, the technology underlying the SeamlessAccess service. Both are designed to provide accessible overviews for a non-technical audience: § How Federated Authentication<https://www.youtube.com/watch?v=wjvC_PUj4CI> works provides a conceptual understanding of how this technology enables more seamless and privacy-preserving access, including definitions of key terms, such as Service Provider, Identity Provider, and Identity Federation. § Privacy, Attributes, and Why They're Important<https://www.youtube.com/watch?v=4xRqdc0DeJI> builds on the previous video to describe the role that Attributes play in preserving user privacy, and the particular challenge that libraries face in configuring library access. Future videos will address other core topics around the use of the SeamlessAccess service, as well as implementation guides covering the various user communities, such as libraries, technical departments, and publishers. Over time, we will also expand the range of video features available, including subtitles in multiple languages to improve accessibility. Our video series can also be found at the SeamlessAccess YouTube Channel<https://www.youtube.com/watch?v=4xRqdc0DeJI>. We welcome your input - please email us at contact(a)SeamlessAccess.org<mailto:contact@seamlessaccess.org> if you have feedback or suggestions for future videos. __________________________________ John Felts Head of Library Technology and Systems Kimbel Library / Coastal Carolina University 376 University Boulevard Conway SC 29526 843-349-5040

1 0

FIM4L news
by Jos Westerbeke 22 Jun '20

22 Jun '20

Hello everyone, The public consultation<https://www.discuto.io/en/consultation/33970> of "FIM4L Guidelines & Recommendations" has been ended. We got a few but good comments. A new version is being made by LIBER WG members and is almost ready. We’ll let you know. Wednesday June 24th, Peter and I will give a presentation about FIM4L at the virtual LIBER 2020 conference<https://liberconference.eu/programme/sessions/securing-and-building-trust/>. Free to join, need to register<https://www.eventbrite.com/e/liber-online-2020-securing-and-building-trust-…>. Welcome! IFLA 2020 in Dublin is canceled, but our abstract is accepted for 2021 in Rotterdam<https://vimeo.com/356587618>, Netherlands. All the best! Jos Jos Westerbeke Library IT Specialist / Demandmanager | Erasmus University Rotterdam, Library | Burgemeester Oudlaan 50 | 3062PA Rotterdam | jos.westerbeke(a)eur.nl<mailto:jos.westerbeke@eur.nl> | +31 640295513

1 0

Fwd: [eduGAIN-discuss] Code of Conduct InfoShare
by Heather Flanagan 27 Mai '20

27 Mai '20

Hello all, and apologies for the cross posting! Many of the people on this list are likely interested in the GÉANT Data Protection Code of Conduct, as it has implications for international data sharing. GÉANT has schedule a call to provide an update on the status of v2. I hope you’ll be able to attend! Thanks! Heather ---------- Forwarded message ---------- From: Nicole Harris <nicole.harris(a)geant.org> Date: May 25, 2020, 6:41 AM -0700 To: edugain-sg(a)lists.geant.org <edugain-sg(a)lists.geant.org>, edugain-discuss(a)lists.geant.org <edugain-discuss(a)lists.geant.org>, refeds(a)lists.refeds.org <refeds(a)lists.refeds.org> Subject: [eduGAIN-discuss] Code of Conduct InfoShare > Dear All > > The team working on the next generation of the GÉANT Code of Conduct would like to give an overview of where progress is with version 2 of the Code following on from feedback from the Dutch DPA. Join us for this InfoShare and help us decide on the best next steps to take with the Code of Conduct. > > The InfoShare will take place on the 8th June 2020 at 11:00 CEST - so we can all pretend that we are actually attending TNC. > > Please register at: https://eventr.geant.org/events/3324 so we can share VC details with the correct participants. > > Many thanks! > > Nicole > -- > Nicole Harris > Head of Trust and Identity Operations > GÉANT > T: +31 (0) 20 530 4488 > M: +31 (0) 646 105395 > Skype: harrisnv > > PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216 > > Networks • Services • People > > Learn more at www.geant.org > > > GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK. > > If you wish to unsubscribe from a list please follow this instruction: From the address with which you subscribed to the list, send a message to sympa(a)lists.geant.org > In the subject line of your email, type: unsubscribe nameofthelist (replace ‘nameofthelist‘ by the name of the list you want to unsubscribe from - you don't need to include "@lists.geant.org"). You will receive an email confirming your removal.

2 1

FIM4L consultation on Recommendations draft
by Jos Westerbeke 20 Apr '20

20 Apr '20

Dear all, I hope you’re all doing well. We decided to postpone the deadline of the consultation to end May. We also give it another push of promotion. Friedel (LIBER) already send an email to all LIBER member libraries. She is looking for the ability to make a general section on top of the document in Discuto. Which makes it easier to receive general feedback. Please share this message! Introduction: https://libereurope.eu/blog/2020/03/02/fim4l-recommendations/<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flibereuro…>. Guidelines and Recommendations: https://www.discuto.io/en/consultation/33970<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.discu…> Guidelines and Recommendations PDF: https://libereurope.eu/wp-content/uploads/2020/03/FIM4L-Guidelines-Consulta…<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flibereuro…> Twitter: https://twitter.com/LIBEReurope/status/1250667239977738240<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.c…> All the best and stay safe, Jos

1 0

Looking for researchers to answer to answer an ORCID survey
by Laura Paglione 14 Apr '20

14 Apr '20

*Apologies for cross-posting -* I'm working with ORCID on a study to get a better understanding of the role of things like bios, profiles, CVs, personal websites, etc as a mechanism for digital introduction for any purpose. We're also looking for insights about how researchers regard the use of this type of artifact for consequential interactions, for example, decisions about promotion, tenure, funding, data access, project involvement, etc. Would you be able to help to get the word out to any researcher communities that you are a part of? Researchers/ scholars do not need to have any knowledge or experience with ORCID. A short blurb is below along with a link to ORCID's blog post about it. --- ORCID (orcid.org) provides a persistent digital identifier that distinguishes you from every other researcher and, through integration in key research workflows such as manuscript and grant submission, supports automated linkages between you and your professional activities ensuring that your work is recognized. Between now and May 1, ORCID is looking for researchers and scholars from all countries, career stages, and disciplines to tell us what they think about how they are connected to their work so we can ultimately improve and enrich the environments, workflows, and interactions that are a part of research and scholarly work. There are two ways to participate - find out more: https://orcid.org/blog/2020/03/25/two-ways-you-can-help-orcid-learn-about-w… --- Thanks! Best, L -- <https://about.me/lpaglione?promo=email_sig&utm_source=product&utm_medium=em…> Be different. Laura Paglione LauraPaglione.com <https://laurapaglione.com/> lpaglione(a)SphericalCowGroup.com <lpaglione(a)sphericalcowgroup.com>

1 0

update on FIM4L
by Jos Westerbeke 06 Apr '20

06 Apr '20

Hi all, First of all, I hope that you’re all doing well! I think many of you, like librarians of digital resources, have quite some work these days;) I hope you can manage it, as most of you are working from home in a locked down country. As you all understand, the LIBER 2020 conference in Belgrade in June is canceled. We were scheduled to have a presentation there. Anyway, work goes on. We have published our Guidelines and Recommendations document for public comments. @all: please share the message<https://libereurope.eu/blog/2020/03/02/fim4l-recommendations/> Two weeks ago I gave a presentation<https://drive.google.com/drive/folders/0AGLhezd40hjwUk9PVA> for librarians of the United Nations. Last week I got an interesting remark from Ralph Youngen (ACS, SeamlessAccess) on a question from Jiri. He said: “... The Pseudonymous entity category will be essential to avoid suspending access to an entire institution in the case of compromised credentials.” Basically, we have two recommendations for libraries to choose from: Principle 4.A (transient identifier) and 4.B (persistent/pseudonymous identifier). If publishers block an entire institution in case of misconduct when a library has chosen for 4.A, how should libraries respond? Should we recommend a pseudonymous identifier? Or is there a way to urge publishers not to block an institution? What are your thoughts on that? (You may put your comments here: https://www.discuto.io/en/consultation/33970 ) Take care and all the best, Jos

3 2

Re: [Fim4l] update on FIM4L
by Jos Westerbeke 06 Apr '20

06 Apr '20

Op 06-04-20 10:33 heeft FIM4L namens Jos Westerbeke <fim4l-bounces(a)lists.daasi.de<mailto:fim4l-bounces@lists.daasi.de> namens jos.westerbeke(a)eur.nl<mailto:jos.westerbeke@eur.nl>> geschreven: Two weeks ago I gave a presentation<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdrive.goo…> for librarians of the United Nations. I’m sorry, the link doesn’t work. Here’s the good one: https://drive.google.com/file/d/1VXw4jiVvpzWTJjRIkkaReuGQvf0V2Bz5/view best, Jos

1 0