2026Short papersPortuguese

Metadata Aggregation vs. Chain of Trust: Comparing CAFe SAML and CAFe OpenID Federation

Published as Agregação de Metadados vs. Cadeia de Confiança: Comparando CAFe SAML e CAFe OpenID Federation

Eduardo Perottoni, Brendon Vicente, Frederico Schardong, Ricardo Custódio, Laerte Belotto, Reinaldo Matushima, Jean Faustino

Anais Estendidos do XXVI Simpósio Brasileiro de Cibersegurança · Armação dos Búzios/RJ

Abstract

The Brazilian Federated Academic Community (CAFe), operated by the National Research and Education Network (RNP), is built on the Security Assertion Markup Language (SAML) protocol. This paper compares today's CAFe with CAFe 2.0, a redesign of the federation on top of the OpenID Federation protocol. The comparison is organised around the topology of the federation, which moves from a two level structure to a multilevel one, and around the trust model, which moves from a static aggregation of metadata to a dynamic and cryptographically verifiable chain of trust.

Keywords: CAFe, SAML, OpenID Federation, Chain of Trust, Identity Federation

Materials

Reference…