Australian Access Federation (AAF) implementation project

A project to deploy Australian Access Federation (AAF) technologies and services into production at Monash and to integrate into e-Research services and applications.

Although there have been some delays in settling the final AAF auEduPerson attribute specifications, Monash has a working, partially supported (limited-production) shibboleth service, based on the MAMS test-bed federation.  The Monash shibboleth service is currently configured to pass about 5 attributes, to any Service (application) that connects to it, irrespective of whether the particular service requires those attributes or not.

The Monash IdP (shibboleth Identity Provider service) links in all Monash authcate accounts, including students.

Any Service (application) that wants to use the Monash shibboleth IdP for authentication, should work now provided the Service doesn’t require attributes that we are not yet passing on.

Direct contact between the IdP and application Service Administrators is likely to be required to set this up in most cases.