CAFe

The Federated Academic Community (Comunidade Acadêmica Federada - CAFe) is an identity management system that gathers Brazilian education and research institutions, through their databases integration. This means that the user can access the services of their institution and the ones offered by other participating organizations from wherever they are, through a single sign-on account. This authentication eliminates the need for multiple access passwords and registration processes, generating a trusting relationship. Distance learning services, access to scientific publications and collaborative activities are among the biggest beneficiaries of the infrastructure offered by federations.

Institutions belonging to CAFe may act as identity providers (IdP) and as service providers (SP). RNP is responsible for managing and keeping the centralized repository with data on federation members.

Benefits

  • It is not necessary to register in different systems or manage different passwords;
  • Steadier navigation, without the need to authenticate every step;
  • Control over data privacy;
  • For the identity provider, the service infrastructure (database and software) may be used to control the access to internal services of the institution, creating a single point for the many offered resources (libraries, academic management systems etc.);
  • For the service provider, the register used can be managed by other institutions (identity providers), with the guarantee of information reliability and updating. They undertake explicitly to maintain the information provided updated, contrary to what happens with solutions in replicated registers.

International agreements 

In addition to serving a growing number of Brazilian educational and research institutions, CAFe is part of many international initiatives, which increases the range of services available to its members. Since December 2012, it is part of eduGAIN, a service that gathers identity management federations that are partners of GÉANT (Pan-European Research Network / Rede de Pesquisa Pan-Europeia). This organization is manager of a high capacity network that includes more than three thousand educational and research institutions in 32 countries through 28 national and regional networks of education and research.

CAFe was the first federation in the Americas to be part of this network. Besides Brazil, Germany, Austria, Belgium, Canada, Chile, Croatia, Denmark, Finland, France, Greece, Holland, Hungary, Ireland, Italy, Latvia, Norway, Poland, Slovenia, Spain, Sweden, Switzerland, United Kingdom and Czech Republic are also part of the federations.

Since March 2011, CAFe is part of the map of the global education and research identity federation kept by the Research and Education Federations (REFEDS), where its participants share the interest in developing technologies, policies and identity management processes. Thus, the federation became the first in Latin America to be internationally recognized for this initiative, managed by the Trans-European Research and Education Networking (TERENA), which articulates the needs of identity federations for education and research worldwide.

Brazil has a leadership position in relation to identity federations in the project Europe Latin America Collaborative e-Infrastucture for Research Activities (ELCIRA) project, managed by the Latin American Advanced Networks Cooperation (RedCLARA) with funding from the European Community. The goal is to support the execution of collaborative projects between researchers from Latin America and Europe.

How it works

A federated authentication and authorization infrastructure is consisted of two main elements: the identity providers, responsible for maintaining information about users and their authentication; and service providers, which offer access to a specific feature or service. The interaction between both is a relationship of trust, because one needs to believe in the quality of data provided by the other, to ensure that these are only used for the agreed purposes.

When accessing a certain service provider, the user is redirected to a page that presents a list of identity providers. The user then choose his home institution and the browser is redirected to this institution’s identity provider. After the user is authenticated, the identity provider sends this authentication result to the service provider and creates a session associated to the user, so that accesses to new services within a given time interval do not generate new authentication requests.

How to subscribe

  • There are two ways to join CAFe: as an identity provider and as a service provider. The most common is the first, since this modality provides the client institution to access all the federation services. The accession process for identity providers is as follows:
  • Sending a formal document with designation of the identity provider responsible to the e-mail atendimento@cafe.rnp.br;
  • Interview with RNP Customer Relationship area;
  • Completion and submission of the identity management form;
  • Technical interview with CAFe's support team;
  • Evaluation of the accession request by the Identity Management Advisory Committee;
  • Technical Certification;
  • Signing the Term of Commitment.

For service providers:

  • Adherence can happen as a result of RNP Service Management prospection; as a suggestion of the Identity Management Technical Committee; for appointment by the Identity Management Advisory Committee; or even through a service provider's own proposal;
  • The use policy of the service provided is evaluated in light of CAFe's policies;
  • Then, the technical compatibility is verified between CAFe and the service provided;
  • The Advisory Committee evaluates the formal appointment of the new service provided.
  • The service is included to the CAFe, published on the federation’s page and communicated to the representatives of client institutions.

Available services

RNP Digital Video portal brings three different services (Video on Demand, Live Video Transmission and TV Signal Transmission) and integrates to the content of the Videoclass@RNP service.

The Video on Demand aims to be a video repository with content related to the activities of the purposes of RNP user organizations (science, technology, education, health and culture) and the federated access to it allows the user to comment on existing videos and publish new videos. The publication, however, still requires RNP’s prior authorization obtained after the request is made ​​through the Service Desk (sd@rnp.br).

Type of access: free

A division of Newsbank content portal, the Readex provides access to an archive of historical newspapers, containing publications from Africa, Latin America, Southeast Asia and Caribbean, 19th century to the early 20th century. Federated access must be performed via the Newsbank portal.

Type of access: available to subscriber’s institutions of Readex

The Periodical Portal of the Coordination of University Level Personnel Improvement (Coordenação de Aperfeiçoamento de Pessoal de Nível Superior - CAPES) is a virtual library, which gathers and makes available the best in international scientific productions to educational and research institutions in Brazil. It has a collection of more than 30.000 titles, 130 referential bases, ten bases dedicated exclusively to patents, as well as books, encyclopedias, reference books, technical standards, statistics and audiovisual content.

Type of access: available to participating institutions in the CAPES Periodical Portal.

DreamSpark is a Microsoft program that offers software, free to download, for university level students. This program is already offered in many countries through academic federations such as CAFe.

Type of access: free for CAFe members. There is also the option of joining a premium account with more features and more software available for download. The registration fee and the requirements for membership are defined by Microsoft.

The Journal and Event Management System (JEMS) is a system for articles’ submission, review, discussion and selection for scientific events of the Brazilian Computer Society (Sociedade Brasileira de Computação - SBC), maintained by the Federal University of Rio Grande do Sul (Universidade Federal do Rio Grande do Sul - UFRGS). Its main goal is to make available an infrastructure for academic participants in SBC events to submitting articles and summaries for evaluation. Thus, the analysis of such documents by the event’s organization and the decision of which of them will be selected for participation is made possible.

Type of access: free

“Global Environment for Network Innovations” – GENI is a research infrastructure portal sponsored by the National Science Foundation, American agency to promote the scientific development. The portal provides a laboratory environment for systems and networks distributed for research and education with multiple testbeds. The virtual laboratory enables research on the future of large networks, creating opportunities for understanding, innovation and transformation of global networks and their interactions with society. GENI provides:

  • Support to large scale experimentation in a shared, heterogeneous and highly equipped infrastructure;
  • High network programmability, promoting innovation in the networking areas, security, services and applications;
  • Collaborative environments for academy, industry and general public, promoting discoveries and innovation.

Type of access: free

Services that operate on RedCLARA’s Advanced Internet infrastructure are intended to promote the development of initiatives for scientific and academic collaboration in the Latin America, real opportunities for the local researchers, scientists and academics. Some services that make up the portal are:

  • Communities: the service allows group work management and present tools that ease the information exchange, the knowledge constitution and ideas discussion.
  • Wiki: the Wiki service facilitates the collaborative creation through web tools.
  • Support: complementary, specialized and virtual resource offered by RedCLARA to every user of its services. Its goal is to answer doubts and incidents related to the material, to the information and to the services provided.
  • Filesender: large file transfer service that allows to load large quantities of information temporarily to a RedCLARA server, that sends a web address; through it, any person or group may download the content sent as many times as needed during a week.
  • Web Conference: with VC Espresso, it is possible to make voice and/or video conferences in a personal computer with any registered user on RedCLARA’s portal. Besides, it is possible to invite non-registered persons.

Type of access: free

PADBR

The PADBR computational grid offers integrated access to the high performance resources geographically distributed among the High Performance Processing National Centers (Centros Nacionais de Processamento de Alto Desempenho - CENAPADs).  There are nine units, respectively operated by UFRGS, UFMG, UFC, UNICAMP, UFRJ, UFPE, INPE, INPA e LNCC. The latest coordinates the system by delegation of the Ministry of Science, Technology and Innovation (Ministério da Ciência, Tecnologia e Inovação - MCTI).
In this service, the user may enjoy the features of submission and monitoring tasks in computational resources, as well as the input and output data management from these tasks.

Type of access: free

Gisela Science Gateway is a scientific applications portal of the Grid Initiatives for e-Science virtual Communities in Europe and Latin America (GISELA) project, which functions as an interface for a grid environment.

Its main goal is to implement a grid infrastructure in Latin America, through a sustainability model based on the “National Grids Initiative” (NGIs). For this, the association with the Latin American Cooperation of Advanced Networks (Cooperação Latino-Americana de Redes Avançadas - RedCLARA), and the national education and research networks (redes nacionais de ensino e pesquisa - NRENs) were used, in addition to the collaboration with the European Grid Initiative (EGI).

Type of access: free

Atlases is a library of high-resolution images of pathology. It is intended for medical students and professionals.

Type of access: free


 Foodle

Web application for scheduling meetings, creating polls and performing simple research.

Required attributes

Type of access: free

 
 INDICATE

Search service for cultural repositories and digital file protected by access control and rights management, containing two large repositories: the “De Roberto Digital Repository (De Roberto DR)” and the “Digital Repository of the Architectural and Archaeological Heritage in the Mediterranean Area (MED Repo)”. 

Required attributes

Type of access: free, through an additional registration.


 RICeVI

IDEM Federation Service, belonging to the Italian academic network (GARR), of remote collaboration, shares network applications and multimedia content. 

Required attributes

Type of access: free

TERENA-SP

Access to services provided by TERENA:

  • FileSender: web tool for sending large files by e-mail. 
  • REFEDS Wiki: Wiki dedicated to research about federations aiming university education, work groups documentation, information regarding content providers and interoperability matrix between federations
  • TERENA Networking Conference: access to the TERENA Networking Conference portal.

Required attributes

Type of access: free

DECIDE

Portal of scientific applications in grid facing the medical and neuroscientific community.

Type of access: free

EUMEDGRID

Portal of scientific applications in grid for scientists in the Mediterranean region.

Type of access: free, through additional registration.

INFN Science Gateway

INFN is an organization dedicated to the study of matter fundamental particles, leading theoretical and experimental searches in the nuclear, sub nuclear and astroparticle physics area. The service provides access to various applications in grid and some of its use cases for the Italian community.

Required attributes

Type of access: free, through additional registration.

NIIF-VVC

Hungarian video, communication and collaboration portal services.

Required attributes 

Type of access: free

Videotorium

Portal for research and researches of educational videos in high definition.

Required attributes

Type of access: free, through additional registration.

Adopted technology

Currently, the SAML (Security Assertion Markup Language) protocol has established itself as an ad hoc standard for exchanging authentication and authorization information between identity and service providers. It is universally adopted by many academic identity federations. Among the SAML based technologies, the Shibboleth pack, developed under the Internet2 project, has been the most widely used. Therefore, this is the technology adopted for CAFe.

Data Schema

A federation must specify what user attributes must be kept by the identity providers and supplied to service providers, if permitted by their privacy settings. For CAFe, the brEduPerson data schema meets this requirement.

Best practices

The Federation recommends that its members adopt the following practices:

  • Have defined procedures for managing users and their attributes;
  • Inform users about best practices regarding the use and confidentiality of passwords, as well as the need to replace them periodically;
  • Enable each user to determine which attributes will be sent for each service. When this is not possible, inform users which attributes are sent without consent;
  • Ensure the high availability of the identity provider;
  • Have a technically prepared team to operate the identity provider;
  • Monitor the identity provider through the tracking logs;
  • Keep log files for the minimum period of six months;
  • Supply the needed information for investigating safety incidents;
  • Keep the server clock synchronized with a NTP server;
  • Monitor the validity of certificates used;
  • Document changes performed to the server;
  • Keep the operational system and other software updated, applying every critical alterations;
  • Update the metadata file hourly;
  • Use only the official CAFe servers  as metadata source;
  • Have a user with read only permissions to query the data source of the identity provider;
  • Have servers (physical or virtual) separated for each application (e.g.: Shibboleth, EID, OpenLDAP, etc.);
  • Keep a safety copy (backup) of the settings of the identity provider;
  • Follow the scripts elaborated by CAFe's support team, using the suggested applications that have support.

Client institutions

Currently, CAFe has the following identity providers

  • A.C.Camargo Hospital;
  • Brazilian Agricultural Research Corporation (in Portuguese, Embrapa);
  • Brazilian Center for Research in Physics (in Portuguese, CBPF);
  • Brazilian Institute of Information in Science and Technology (Ibict);
  • Brazilian National Research and Educational Network (in Portuguese, RNP);
  • Catholic University of Santos (in Portuguese, Unisantos);
  • Community Regional University of Chapecó (in portuguese, UNOChapeco).
  • Coordination of University Level Personnel Improvement (in Portuguese, Capes);
  • Energy and Nuclear Research Institute (in Portuguese, Ipen);
  • Evandro Chagas Institute; 
  • Federal Center of Technological Education of Minas Gerais (in Portuguese, Cefet-MG);
  • Federal Center of Technological Education of Rio de Janeiro (in Portuguese, Cefet-RJ);
  • Federal Health Science University of Porto Alegre (in Portugues, UFCSPA);
  • Federal Institute of Education, Science and Technology Farroupilha (in Portuguese, IFFarroupilha);
  • Federal Institute of Education, Science and Technology of Acre (in Portuguese, Ifac);
  • Federal Institute of Education, Science and Technology of Alagoas (in Portuguese, IFAL);
  • Federal Institute of Education, Science and Technology of Amapá (in Portuguese, Ifap);
  • Federal Institute of Education, Science and Technology of Amazonas (in Portuguese, Ifam);
  • Federal Institute of Education, Science and Technology of Bahia (in Portuguese, IFBA);
  • Federal Institute of Education, Science and Technology of Bahia (in Portuguese, IF Baiano);
  • Federal Institute of Education, Science and Technology of Brasília (in Portuguese, IFB);
  • Federal Institute of Education, Science and Technology of Ceará (in Portuguese, IFCE);
  • Federal Institute of Education, Science and Technology of Espírito Santo (in Portuguese, Ifes);
  • Federal Institute of Education, Science and Technology of Goiás (in Portuguese, IFG);
  • Federal Institute of Education, Science and Technology of Goiás (in Portuguese, IF Goiano);
  • Federal Institute of Education, Science and Technology of Maranhão (in Portuguese, IFMA);
  • Federal Institute of Education, Science and Technology of Mato Grosso (in Portuguese, IFMT);
  • Federal Institute of Education, Science and Technology of Minas Gerais (in Portuguese, IFMG);
  • Federal Institute of Education, Science and Technology of Minas Gerais Southeast (in Portuguese, IF Sudeste MG);
  • Federal Institute of Education, Science and Technology of Minas Gerais South (in Portuguese, IFSulMG);
  • Federal Institute of Education, Science and Technology of Northern Minas Gerais (in Portuguese, IFNMG);
  • Federal Institute of Education, Science and Technology of Pará (in Portuguese, IFPA);
  • Federal Institute of Education, Science and Technology of Paraíba (in Portuguese, IFPB);
  • Federal Institute of Education, Science and Technology of Paraná (in Portuguese, IFPR);
  • Federal Institute of Education, Science and Technology of Pernambuco Hinterland (in Portuguese, IFSertão-PE);
  • Federal Institute of Education, Science and Technology of Piauí (in Portuguese, IFPI);
  • Federal Institute of Education, Science and Technology of Rio de Janeiro (in Portuguese, IFRJ);
  • Federal Institute of Education, Science and Technology of Rio Grande do Norte (in Portuguese, IFRN);
  • Federal Institute of Education, Science and Technology of Rio Grande do Sul (in Portuguese, IFRS);
  • Federal Institute of Education, Science and Technology of Rio Grande do Sul (in Portuguese, IFSUL);
  • Federal Institute of Education, Science and Technology of Rondônia (in Portuguese, IFRO);
  • Federal Institute of Education, Science and Technology of Roraima (in Portuguese, IFRR);
  • Federal Institute of Education, Science and Technology of Santa Catarina (in Portuguese, IFSC);
  • Federal Institute of Education, Science and Technology of Santa Catarina (in Portuguese, IFC);
  • Federal Institute of Education, Science and Technology of São Paulo (in Portuguese, IFSP);
  • Federal Institute of Education, Science and Technology of Sergipe (in Portuguese, IFS);
  • Federal Institute of Education, Science and Technology of Tocantins (in Portuguese, IFTO);
  • Federal Rural University of Amazônia (in Portuguese, UFRA);
  • Federal Rural University of Pernambuco (in Portuguese, UFRPE);
  • Federal Technological University of Paraná (in Portuguese, UTFPR);
  • Federal University of ABC (in Portuguese, UFABC);
  • Federal University of Acre (in Portuguese, Ufac);
  • Federal University of Alagoas (in Portuguese, Ufal);
  • Federal University of Alfenas (in Portuguese, Unifal);
  • Federal University of Amapá (in Portuguese, Unifap);
  • Federal University of Amazonas (in Portuguese, Ufam);
  • Federal University of Bahia (in Portuguese, UFBA);
  • Federal University of Cariri (in Portuguese, UFCA);
  • Federal University of Ceará (in Portuguese, UFC);
  • Federal University of Espírito Santo (in Portuguese, Ufes);
  • Federal University of Goiás (in Portuguese, UFG);
  • Federal University of Grande Dourados (in Portuguese, UFGD);
  • Federal University of Itajubá (in Portuguese, Unifei);
  • Federal University of Juiz de Fora (in Portuguese, UFJF);
  • Federal University of Latin American Integration (in Portuguese, UNILA);
  • Federal University of Lavras (in Portuguese, Ufla);
  • Federal University of Maranhão (in Portuguese, UFMA);
  • Federal University of Mato Grosso (in Portuguese, UFMT);
  • Federal University of Mato Grosso do Sul (in Portuguese, UFMS);
  • Federal University of Minas Gerais (in Portuguese, UFMG);
  • Federal University of Ouro Preto (in Portuguese, UFOP);
  • Federal University of Pampa (in Portuguese, Unipampa);
  • Federal University of Pará (in Portuguese, UFPA);
  • Federal University of Paraiba (in Portuguese, UFPB);
  • Federal University of Paraná (in Portuguese, UFPR);
  • Federal University of Pelotas (in Portuguese, UFPel);
  • Federal University of Pernambuco (in Portuguese, UFPE);
  • Federal University of Piauí (in Portuguese, UFPI);
  • Federal University of Recôncavo da Bahia (in Portuguese, UFRB);
  • Federal University of Rio de Janeiro State (in Portuguese, Unirio);
  • Federal University of Rio Grande (in Portuguese, Furg);
  • Federal University of Rio Grande do Norte (in Portuguese, UFRN);
  • Federal University of Rio Grande do Sul (in Portuguese, UFRGS);
  • Federal University of Rondônia (in Portuguese, Unir);
  • Federal University of Santa Catarina (in Portuguese, UFSC);
  • Federal University of Santa Maria (in Portuguese, UFSM);
  • Federal University of São Paulo (in Portuguese, Unifesp);
  • Federal University of Sergipe (in Portuguese, UFS);
  • Federal University of South Border (in Portuguese, UFFS);
  • Federal University of Sul e Sudeste do Pará (in Portuguese, Unifesspa);
  • Federal University of the Triângulo Mineiro (in Portuguese, UFTM);
  • Federal University of Tocantins (in Portuguese, UFT);
  • Federal University of Uberlândia (in Portuguese, UFU);
  • Federal University of Vale do São Francisco (in Portuguese, Univasf);
  • Federal University of Vales do Jequitinhonha e Mucuri (in Portuguese, UFVJM);
  • Federal University of Viçosa (in Portuguese, UFV);
  • Federal University of Western Bahia (in Portuguese, Ufob);
  • Fluminense Federal Institute of Education, Science and Technology (in Portuguese, IFF);
  • Fluminense Federal University (in Portuguese, UFF);
  • Getúlio Vargas Foundation (in Portuguese, FGV);
  • Institute of Nuclear Engineering (in Portuguese, IEN);
  • Institute of Scientific and Technological Research of Amapá State (in Portuguese, Iepa);
  • Integrated Company of Agricultural Development of Santa Catarina (in Portuguese, Cidasc);
  • “Júlio de Mesquita Filho” State University of São Paulo (in Portuguese, Unesp);
  • Lutheran University of Brasil (in Portuguese, Ulbra);
  • Medical Sciences Faculty of Santa Casa de São Paulo (in Portugues, FCMSCSP);
  • Medicine Faculty of São José do Rio Preto (in Portuguese, Famerp);
  • Methodist University of São Paulo (in Portuguese, Umsp);
  • Mineral Resources Research Company (in Portuguese, CPRM);
  • Mineral Technology Center (in Portuguese, Cetem);
  • Ministry of Science, Technology and Innovation (in Portuguese, MCTI);
  • Municipal University of São Caetano do Sul (in Portuguese, USCS);
  • Museum of Astronomy and Related Sciences (in Portuguese, Mast);
  • National Institute of Metrology, Quality and Technology (in Portuguese, Inmetro);
  • National Institute of Pure and Applied Mathematics (in Portuguese, Impa);
  • National Nuclear Energy Commission (in Portuguese, CNEN);
  • National Observatory (in Portuguese, ON);
  • National Research Institute of Amazônia (in Portuguese, Inpa);
  • National Technology Institute (in Portuguese, INT);
  • Oswaldo Cruz Foundations (in Portuguese, Fiocruz);
  • Pedro II School (in Portuguese, CPII);
  • Pernambuco Institute of Technology (in Portuguese, Itep);
  • Pontifical Catholic University of Campinas (in Portuguese, PUC-Campinas);
  • Pontifical Catholic University of Goiás (in Portuguese, PUC-GO);
  • Pontifical Catholic University of Minas Gerais (in Portuguese, PUC-MG);
  • Pontifical Catholic University of Rio Grande do Sul (in Portuguese, PUC-RS);
  • Pontifical Catholic University of São Paulo (in Portuguese, PUC-SP);
  • Porto Alegre Clinical Hospital (in Portuguese, HCPA);
  • Public Law Institute of Brasília (in Portuguese, IDP);
  • Regional University of Blumenau (in Portuguese, Furb);
  • Regional University of Cariri (in Portuguese, Urca);
  • Regional University of Northwest Rio Grande do Sul State (in Portuguese, Unijuí).
  • Research Institute Foundation of Espírito Santo (in Portuguese, Fucape);
  • São Paulo Research Foundation (in Portuguese, Fapesp);
  • School of Medicine and Public Health of Bahia (in Portuguese, EBMSP);
  • School of National Statistical Sciences (in Portuguese, Ence);
  • Semi-Arid National Institute (in Portuguese, Insa);
  • State University of Campinas (in Portuguese, Unicamp);
  • State University of Ceará (in Portuguese, Uece);
  • State University of Maranhão (in Portuguese, Uema);
  • State University of Maringá (in Portuguese, UEM);
  • State University of Midwest of Santa Cruz (in Portuguese, Unicentro);
  • State University of Paraíba (in Portuguese, UEPB);
  • State University of Ponta Grossa (in Portuguese, UEPG);
  • State University of Santa Catarina (in Portuguese, Udesc);
  • State University of Santa Cruz (in Portuguese, Uesc);
  • State University of Southwest Bahia (in Portuguese, UESB);
  • State University of Vale do Acaraú (in Portuguese, UVA);
  • Syrian-Lebanese Hospital (in Portuguese, HSL);
  • University Center Feevale (in Portuguese, Feevale);
  • University of Brasília (in Portuguese, UNB);
  • University of Caxias do Sul (in Portuguese, UCS);
  • University of Franca (in Portuguese, Unifran);
  • University of International Integration of Afro-Brazilian Lusophony (in Portuguese, Unilab);
  • University of Joinville (in Portuguese, Univille);
  • University of Mogi das Cruzes (in Portuguese, UMC);
  • University of Passo Fundo (in Portuguese, UPF);
  • University of Santa Cruz do Sul (in Portuguese, Unisc);
  • University of São Francisco (in Portuguese, USF);
  • University of São Paulo (in Portuguese, USP);
  • University of Sorocaba (in Portuguese, Uniso);
  • University of Taubaté (in Portuguese, Unitau);
  • University of Uberaba (in Portuguese; Uniube);
  • University of Vale do Itajaí (in Portuguese, Univali);
  • University of Vale do Taquari (in Portuguese, Univates);
  • University of Western Santa Catarina (in Portuguese, Unoesc).