Federation Architectures and OpenID Federation: Provider Onboarding and Data Sovereignty
Published as Arquiteturas de Federação e o OpenID Federation: Adesão de Provedores e Soberania de Dados
Anais Estendidos do XXVI Simpósio Brasileiro de Cibersegurança · Armação dos Búzios/RJ
Abstract
Academic identity federations are beginning to migrate from the Security Assertion Markup Language (SAML) to OpenID Federation. Adopting the new protocol, however, introduces complexities. To reduce the friction of that process, this work proposes a federation architecture close to the hub-and-spoke model, in which components are hosted by the federation operator, making it easier for providers to join than in a full mesh. The paper discusses the trade-off between ease of adoption and data sovereignty, addressing the risks of centralisation and how to mitigate them.
Keywords: OpenID Federation, Federation Architecture, Hub-and-Spoke, Data Sovereignty, Provider Onboarding
Materials
Reference…