Federated Trust and Identity (T&I) technical requirements, architecture and best practices (CRAFT-OA Deliverable 6.5)

Deliverable D6.5 defines what Open Journal Platforms (OJP) and Diamond Open Access (Diamond OA) partners must adopt to participate in a federated Trust & Identity (T&I) ecosystem: (i) best practices to onboard new partners to Single Sign-On (SSO), and (ii) the T&I technical architecture together with the interoperability framework and standards that OJP should implement or align to. The report is public and part of WP6: Journals’ Data Reuse and Uptake in (European Open Science Cloud) EOSC. The document first states the scope and objectives of D6.5 and positions it within CRAFT-OA’s technical work. It then sets out technical requirements for federated T&I in journal platforms, proposes a reference architecture showing the components and interfaces needed for SSO, and lists the interoperability framework and standards to ensure that platforms implement T&I consistently. Finally, it provides best-practice guidance to help new Diamond OA partners adopt SSO smoothly, alongside a conformance checklist that journals and platforms can use to verify that requirements, architecture elements, and standards are in place. Together, these elements fulfil the Grant Agreement’s success criteria for D6.5. This deliverable is currently under review by the EC.