Internet2

InCommon is operated by Internet2

InCommon

About            Participants            Join InCommon

Federation

Join InCommon

InCommon Participants

InCommon Affiliates

InCommon Basics

InCommon Policies and Practices

Changing the InCommon Exec, Site Admin, RAO

IAM Online Webinar Series

About InCommon

Contact InCommon


InCommon Officials

InCommon Executive, Federation Site Administrator, Certficate Service RAO

This page includes:

  1. Definitions of the roles
  2. Instructions for updating the InCommon Executive
  3. Instructions for updating the Federation Site Administrator
  4. Instructions for updating the RAO for the Certificate Service

Roles

InCommon Executive: The InCommon Executive represents the participant organization regarding all decisions and delegations of authority for the responsibilities of InCommon Participants, including but not limited to, all relevant federation and certificate services. This includes payment of invoices, and assigning any person in the trusted administrator role (see below) for the InCommon Federation and as the Registration Authority Officer (RAO) for the InCommon Certificate Service. The executive is authorized as such in the InCommon participation agreement or by succession from the originally named executive. The executive role will typically be filled by a CIO, VP of IT, or other senior administrative officer responsible for the organization's information technology assets.

Federation Site Administrator: The Federation Site Administrator serves as the participating organization's primary registrar. The administrator is responsible for registering and maintaining the policies and technical data related to the organization's participation in the InCommon Federation, including the submission of the URL of the Participant's POP and any Identity Provider and/or Service Provider metadata and associated certificates. The administrator is assigned by the participating organization's designated executive. Each InCommon participant can have up to two Federation Site Administrators.

Certificate Service Registration Authority Officer (RAO): The Certificate Service RAO has privileges to request and manage certificates for domains owned and controlled by that person's organization. RAOs can also create departments and can request or approve the creation of DRAOs (Department Registration Authority Officers). Each InCommon participant can have up to three RAOs.

Updating Your InCommon Executive

Send a letter (on the organization's letterhead) signed by the organization attesting to the new InCommon Executive's role and work-related personal information: Name, Title, Email, Trusted Phone.

This can be as simple as using the template we have provided (this is a Word document -- please place this on your organization's letterhead), having the letter signed, then scanning and emailing it to admin AT incommon.org. We'll then schedule a short phone call with the new Executive for identity-proofing.

Updating the Federation Site Administrator

Each organization participating in the InCommon Federation can have one or two Site Administrators.

If you need to add or change a Site Administrator, the designated InCommon Executive should email InCommon (admin AT incommon.org) with the information about the new Site Administrator, as noted below.  We will then schedule a call with the Executive via the verified phone number. This phone call will take just five minutes. Once the Executive has officially authorized the new Site Administrator, InCommon will call to identity-proof the new Site Administrator and provide credentials for the InCommon Site Admin registry/interface.

Name:
Title:
Email:
Phone:

Updating the RAO for the Certificate Service

Each InCommon Certificate Service subscriber can have up to three RAOs (Registration Authority Officers).

If you need to add or change an RAO, the designated InCommon Executive should email InCommon (admin AT incommon.org) with the information about the new RAO, as noted below. We will then schedule a call with the Executive via the verified phone number. This phone call will take just five minutes. Once the Executive has officially authorized the new RAO, InCommon will call to identity proof the new RAO and provide credentials for the Certificate Manager (CM) interface.

Name:
Title:
Email:
Phone:

Copyright 2004-2013 InCommon LLC. All rights reserved. info@incommon.org. InCommon is operated by Internet2.