Snctfi - the Scalable Negotiator for a Community Trust Framework in Federated Infrastructures

Building on the structures of the Security for Collaboration among Infrastructures (SCI) framework, the “Security Negotiator for Community Trust Framework in Federated Infrastructures” (Snctfi) proposes a policy framework that allows determination of the 'interoperable trust' of such SP-IdP proxies and the community of services behind the Proxy. For example, an SP-IdP-proxy for EGI – proxying for all its compute and storage services – would be able to express to the R&E federation space that is has an internally-consistent policy set, that it can make collective statements about all its constituent services and resource providers, and that it will abide by best practices in the R&E community, such as adherence to the Data Protection Code of Conduct (DPCoCo), REFEDS Research and Scholarship (R&S) entity category, and Sirtfi – the security incident response trust framework that is in itself a separate development from the SCI structure.

Snctfi and the IGTF

The Snctfi framework was developed under the aegis of the AARC project, and takes its inspiration from many sources, such as SCI and the Sirtfi security incident response framework. In order to ensure longer term maintenance of the Snctfi document and ideas, and since it is primarily serving the needs of the Research and e-Infrastructures that are members of the IGTF, the Snctfi working group decided to use the IGTF mechanisms to maintain and evolve Snctfi here - just like Sirtfi is managed by REFEDS, and SCI by the WISE Community.

The research leading to these results has received funding from the European Community’s Horizon2020 Programme under Grant Agreement No. 653965 (AARC).

The Snctfi framework identifies operational and policy requirements to help establish trust between an Infrastructure and identity providers either in an R&E Federation or in another Infrastructure, in each case joined via a Service Provider to Identity Provider proxy.
This document is intended for use by the personnel responsible for the management, operation and security of an Infrastructure and those wishing to assess its trustworthiness.

Snctfi is supported via the Authentication and Authorization for Research and Collaboration (AARC) project with contributions from many Research and e-Infrastructures, NRENs, and IGTF members. Read the Snctfi framework, apply it to your infrastucture, and share it with peers and R&E federations to foster global interoperability.