How to Submit a Request for Federation Membership as a GFIPM Service Provider

From GFIPM Implementation Wiki
Jump to: navigation, search
Main Page Up Previous Next


This article serves as a supplemental aid to the membership application process by listing the membership documents that must be collected or developed during the SP implementation process. The authoritative document for this process in NIEF is the Operational Policies and Procedures document [GFIPM OPP]. This section of this document is not a substitute for the OPP document.

The membership process follows these four phases:

  1. Request-to-join process
  2. Application process
  3. On-boarding process
  4. Ongoing membership

During the SP implementation process, you should collect or develop the following membership documents:

Authority-to-Operate (ATO) Document A document, or documents, that attests to the organization's authority to operate as a service provider and make available electronic resources belonging to, or under the legal control of, a specific legal jurisdiction. An ATO document typically takes the form of a signed memorandum or letter from the organization's executive officer to the federation manager.
   
Local Security Policy Document A document that describes the security policy currently in place within your organization. This document should already exist within your organization.
   
Local User Agreement Document A document that describes the terms and conditions to which your users must agree as a prerequisite for using a digital identity issued by your organization. This document should already exist within your organization.
   
Local Privacy Policy Document A document that describes the policies that govern the practices for maintaining the privacy of users visiting the organization's service provider or portal. This document should already exist within your organization.
   
Local Access Policy Mapping Form for SP A document that describes how the organization plans to map its local, access-control policies into rules that can be expressed using attributes from the GFIPM Metadata Specification [GFIPM Metadata].
   
Implementation Documentation Form for SP A document that describes how your local federation-aware infrastructure is implemented.

Other documents are required for the membership application process, but they are outside the scope of this article.


Main Page Up Previous Next