Identity federation service for the research and education network of the Ministry of Higher Education X Taller Internacional “La transformación digital y las tecnologías de avanzada en la Educación Superior”

Abstract

Identity federation is a trust system between two or more parties, capable of authenticating users, as well as transmitting the necessary information to authorize their access to the resources provided by service providers, in a more secure and efficient way. To this end, they share and distribute information related to user identity and attributes, through different trust domains, according to certain established policies. The purpose of this work was to design an identity federation service for the national network of research and advanced education of the Ministry of Higher Education of the Republic of Cuba. For this purpose, a study was made of the main elements that make up identity federations, as well as the standards and architectures most commonly used in their implementation. In order to carry out the design, identity federations implemented by similar organizations were analyzed to take some of their experiences as a starting point. After carrying out a study of the aspects involved in this identity management model and analyzing the particularities of the network where the federation was implemented, we proceeded to design the service, and took into account the requirements established for it.