https://aai.cesnet.cz/ 2026-05-17T04:33:06+00:00 https://aai.cesnet.cz/ https://aai.cesnet.cz/_media/logo.png text/html 2026-01-08T14:00:11+00:00 Pavel Vyskočil (vyskocil_cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index?rev=1767880811&do=diff EINFRA AAI EINFRA AAI is a service which provides authentication and authorisation for services within EINFRA. From the user's point of view, he/she is provided with a single entry point for using the connected services. AAI relies on the usage of user accounts managed by third parties (universities, organizations or social networks). This creates a more user-friendly way of how the users can authenticate to the services. They just simply create an AAI account and connect it to an external acc… text/html 2025-02-06T21:28:07+00:00 Ing. Michal Švamberg (svamberg_cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=site_logo.png&ns=0&rev=1738877287&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/site_logo.png?w=500&amp;h=500&amp;tok=86ea24" alt="site_logo.png" loading="lazy" width="500" height="500" /> text/html 2024-09-02T08:45:59+00:00 vyskocil_cesnet.cz1 (vyskocil_cesnet.cz1@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/implementing_the_service_provider?rev=1725266759&do=diff Implementing service provider As mentioned in the other pages, ProxyIdP currently supports connecting services via two protocols. This page contains common practices and tips on how to implement authentication using one of these protocols. SAML * text/html 2020-12-16T11:30:43+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/how_to_manage_access_to_a_service?rev=1608118243&do=diff Restricting access to the service The AAI provides advanced functionality to restrict access to the service based on some specified rules. One of these rules can be a requirement of membership in at least one of the specified organizational units (groups). Following is the description of setting up such a requirement. text/html 2020-12-16T07:18:01+00:00 df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz (df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/new_sp?rev=1608103081&do=diff Connecting the service Content of this page describes the administrative process of connecting service to E-INFRA AAI. A guide on how to implement a service provider/relying party is available at here. Service administration and registration takes place in the Service Provider registration application (SPReg). It is available at text/html 2020-12-16T06:40:10+00:00 df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz (df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/attributes_and_scopes?rev=1608100810&do=diff Attributes and scopes This document defines the attributes available to relying services from E-INFRA AAI. E-INFRA Identifier * Description: unique, unrecykled user´s identificator within e-infrastructure CESNET * SAML attribute(s): urn:oid:1.3.6.1.4.1.5923.1.1.1.13 (eduPersonUniqueId) text/html 2020-12-09T14:00:25+00:00 df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz (df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/protocols?rev=1607522425&do=diff Protocols Proxy IdP supports two protocols for connecting a service - SAML2 and OpenID Connect. SAML2 Security Assertion Markup Language 2.0 is a version of the SAML standard for exchanging authorization data between the identity provider and the service provider. SAML is an XML-based protocol. Two major roles play a part in the SAML protocol - Identity Provider(IdP - Retains authoritative information about users, authenticates users and passes on information about users.) and Service Provid… text/html 2020-11-24T13:58:21+00:00 1141cd825e33f2281fc659232bcf401af2705c39@einfra.cesnet.cz (1141cd825e33f2281fc659232bcf401af2705c39@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/en/index/documentation/sp/proxy/serivces_proxy?rev=1606226301&do=diff Services provided by Proxy IdP A filter for WAYF/DS (Where Are You From/Discovery Service) SP can affect a list of the identity providers on WAYFProxy IdP because WAYF is based on CESNET WAYF (<https://www.eduid.cz/cs/tech/wayf>), a filter configuration is going on <https://ds.eduid.cz/filter.php>. Then provide the value of filter as an attribute filter. In the case of longer filters, we recommend to save the value into a file and provide the link as an attribute efilter. More information abou… text/html 2020-11-20T17:59:45+00:00 df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz (df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Asp%3Aproxy%3Aoidc_handson.pdf&ns=en%3Aindex%3Adocumentation%3Asp%3Aproxy&rev=1605895185&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/lib/images/fileicons/svg/pdf.svg" alt="oidc_handson.pdf" loading="lazy" width="500" height="500" /> text/html 2020-10-07T09:53:06+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Asp%3Aproxy%3Aarchitektura-proxycesnet-bez.png&ns=en%3Aindex%3Adocumentation%3Asp%3Aproxy&rev=1602064386&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/sp/proxy/architektura-proxycesnet-bez.png?w=500&amp;h=500&amp;tok=4c31d4" alt="architektura-proxycesnet-bez.png" loading="lazy" width="500" height="500" /> text/html 2020-10-07T09:50:26+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Asp%3Aproxy%3Aarchitektura-proxy-bila.png&ns=en%3Aindex%3Adocumentation%3Asp%3Aproxy&rev=1602064226&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/sp/proxy/architektura-proxy-bila.png?w=500&amp;h=500&amp;tok=d828f2" alt="architektura-proxy-bila.png" loading="lazy" width="500" height="500" /> text/html 2020-08-27T09:25:38+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Asp%3Aproxy%3Aarchitectue.png&ns=en%3Aindex%3Adocumentation%3Asp%3Aproxy&rev=1598520338&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/sp/proxy/architectue.png?w=500&amp;h=500&amp;tok=fef418" alt="architectue.png" loading="lazy" width="500" height="500" /> text/html 2020-08-27T09:11:37+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Alinked.png&ns=en%3Aindex%3Adocumentation&rev=1598519497&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/linked.png?w=500&amp;h=500&amp;tok=f76bdd" alt="linked.png" loading="lazy" width="500" height="500" /> text/html 2020-08-27T09:10:12+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Avyber_uctu.png&ns=en%3Aindex%3Adocumentation&rev=1598519412&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/vyber_uctu.png?w=500&amp;h=500&amp;tok=d22f73" alt="vyber_uctu.png" loading="lazy" width="500" height="500" /> text/html 2020-08-27T09:03:13+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Aconsol.png&ns=en%3Aindex%3Adocumentation&rev=1598518993&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/consol.png?w=500&amp;h=500&amp;tok=266fd9" alt="consol.png" loading="lazy" width="500" height="500" /> text/html 2020-07-03T08:56:04+00:00 c86d7bf8599499d86356894a11b1a5815990276f@einfra.cesnet.cz (c86d7bf8599499d86356894a11b1a5815990276f@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Auser%3Aukazka_2.png&ns=en%3Aindex%3Adocumentation%3Auser&rev=1593766564&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/user/ukazka_2.png?w=500&amp;h=500&amp;tok=95fb1c" alt="ukazka_2.png" loading="lazy" width="500" height="500" /> text/html 2020-07-03T08:55:25+00:00 c86d7bf8599499d86356894a11b1a5815990276f@einfra.cesnet.cz (c86d7bf8599499d86356894a11b1a5815990276f@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Auser%3Aukazka_1.png&ns=en%3Aindex%3Adocumentation%3Auser&rev=1593766525&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/user/ukazka_1.png?w=500&amp;h=500&amp;tok=539c9b" alt="ukazka_1.png" loading="lazy" width="500" height="500" /> text/html 2020-06-29T12:21:21+00:00 495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz (495f390f90d2a366dd35091b70f3de970d1ec8a3@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Adocumentation%3Auser%3Afed_log.png&ns=en%3Aindex%3Adocumentation%3Auser&rev=1593433281&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/index/documentation/user/fed_log.png?w=500&amp;h=500&amp;tok=9e8b08" alt="fed_log.png" loading="lazy" width="500" height="500" /> text/html 2020-06-04T15:36:38+00:00 df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz (df6fe45d8bb8eabb942792eacc62f57df2e2a5e1@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aproxyidp%3Aproxy_diagram.png&ns=en%3Aproxyidp&rev=1591284998&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/_media/en/proxyidp/proxy_diagram.png?w=500&amp;h=500&amp;tok=3a5808" alt="proxy_diagram.png" loading="lazy" width="500" height="500" /> text/html 2020-06-02T14:54:14+00:00 7453aadfdd7b1a07b5e115c6e0567fa1236d9d43@einfra.cesnet.cz (7453aadfdd7b1a07b5e115c6e0567fa1236d9d43@einfra.cesnet.cz@undisclosed.example.com) https://aai.cesnet.cz/?image=en%3Aindex%3Aola-perun-cesnet-v1.pdf&ns=en%3Aindex&rev=1591109654&tab_details=history&media_do=diff&do=media <img src="https://aai.cesnet.cz/lib/images/fileicons/svg/pdf.svg" alt="ola-perun-cesnet-v1.pdf" loading="lazy" width="500" height="500" />