Extended Model for Efficient Federated Identity Management with Dynamic Levels of Assurance Across eIDAS, REFEDS, and Kantara Frameworks for Educational Institutions

The electronic identity (eID) concept plays a crucial role in building trust and security in electronic transactions and communications. In federated systems, where multiple organizations and users share and use common resources, effective identity management is critical. In this context, the use of an identity provider proxy (IdP proxy) has the potential to facilitate and enhance the interoperability and security of electronic identities. This research examines the role, benefits, and challenges of using an IdP proxy in federated systems. Additionally, this study focuses on the use of IdP proxies for the management of electronic identities in federated systems and compares the approaches and practices employed in three significant frameworks: eIDAS (electronic identification, authentication, and trust services), REFEDS (research and education federations), and the Kantara Initiative. Considering the identity architectures of the eIDAS, REFEDS, and Kantara frameworks—each of which exhibits special and unique features—as a reference point to analyze identity attributes, we use the AARC blueprint model, the main component of which is the IdP proxy, as an intermediary for the management of identity attributes.