Incident response in identity federations: Sirtfi and SURFconext

As uptake of federated authentication systems like SURFconext grows, maintaining trust in the system is essential. Interfederation with eduGAIN further increases the amount of service providers and identity providers that can communicate. Although this is of course a good thing, the distance between operators of service providers and identity providers grows because they may be part of different federations. And the larger a federation becomes, the more impact a compromised account can have.