Managed Identity Providers in CAFe: Sovereignty and Inclusion for Organisations without Technical Staff

Abstract

The Brazilian Federated Academic Community (CAFe), operated by the National Research and Education Network (RNP), assumes that every participating institution runs its own Identity Provider. That assumption excludes teaching and research organisations without technical capacity, such as scientific societies, support foundations and technical schools. Faced with this barrier, they tend to stay outside the federation or to delegate identity management to international commercial providers. This paper argues that identity management sovereignty is unreachable on their own for organisations without technical staff, and proposes offering a managed Identity Provider as a service run by a national operator.