For an Identity Federation trust is everything. To enable trust there is a federation policy that regulates the federation operator’s organisation and working methods as well as the regulatory framework for Identity Providers and Service Providers.
SWAMID Policy Framework
The policy framework for SWAMID consists of three parts: SWAMID Federation Policy describes the management and organization, assurance profiles describing what a relying party can expect from a educational sector login via SWAMID and technology profiles describing the technical interfaces WebSSO SAML and eduroam. Alongside the assurance and technology profiles are also Entity Categories to facilitate communication between Identity Providers and Service Providers.
- SWAMID Federation Policy
- Technology profile SAML WebSSO
- Technology profile eduroam
Identity Provider (IdP)
For an organisation to be able to use services linked to SWAMID the organisation needs to become a member of the Federation. This is done by the Membership Agreement signed and submitted to SWAMID by mail and e-mail. Together with the Membership Agreement an Assurance Declaration for SWAMID Identity Assurance Profiles in form of an Identity Management Practice Statement must be submitted. The Assurance Declaration may only to be sent by e-mail.
Identity Assurance Profiles
- SWAMID Identity Assurance Level 1 Profile
- SWAMID Identity Assurance Level 2 Profile
- SWAMID Person-Proofed Multi-Factor Profile
Service Provider (SP)
The SWAMID Metadata Terms of Access and Use is aimed at facilitating access to SWAMIDS Metadata for external Service Providers. The Terms of Access and Use outline the purpose, access to and how you can use SWAMID Metadata. The SWAMID Metadata Terms of Access and Use is used instead of a contract between SWAMID and external service providers. To further enable the service providers to get the right information about users who log in using SWAMID there are Entity Categories.
- SWAMID Metadata Terms of Access and Use
- Service Provider Entity Categories used within SWAMID
Interfederation
SWAMID is a member of the Interfederation eduGAIN. In the same way that every member of SWAMID must write a Trust Declaration in the Identity Management Practice Statement, any member of the interfederation write and publish a Federation Metadata Registration Practice Statement.