Authentication methods and assurance
The EMREX network is built on trust. Each SMP trusts the NCP in another country and especially that the authentication used is adequate.
WAYF (Where Are You From)
WAYF is a Single Sign-On system which permits using one single login to access several web based services. In this context the EMREX system will be a “web based service”.
See below figure illustrating the flow.
Users will login at the local institution using a username and password.
HAKA-federation
In Finland Haka is used to identify the users in EMREX.
Haka is the identity federation of the Finnish universities, polytechnics and research institutions. Users are able to access federation services using a single user account and password. User identities are provided by the users home organizations.
Local user identities are given by the home HEI. Students are requested to provide a valid identity card to receive their username+password.
Feide / Id-Porten
In Norway, Feide and Id-Porten are used to identify the users in EMREX. These are two different identity federations.
Feide is the identity federation of the Norwegian education institutions, used in primary, secondary and higher education. Users are able to access federation services using a single user account and password. User identities are provided by the users home organizations.
Local user identities are given by the home HEI. Students are requested to provide a valid identity card to receive their username+password.
more about Feide: https://www.feide.no/introducing-feide
Swamid
SWAMID offers a middleware infrastructure that facilitates cooperation in higher education and research.
Italy (Local)
In Italy authentication will be local to each HEI. The Emrex system will be installed on E3 Network (a centralized network) and the student, once chosen the HEI from which retrieve the achievements, will be redirected to a specific login page of the local SIS (ESSE3 for the great majority of Italian Universities) and then back to E3 network. The credentials recovered this way will be used to retrieve achievements using web services.