Our Policies

AAI Identity Federation Policy

The Federation Policy document defines the Federation by defining the Federation Members’ obligations and rights to be able to use available Federation Technologies for electronic identification and for access to attribute and authorization information about End Users in the Federation.

AAI Metadata Registration Practice Statement

This document describes the metadata registration practices of the Federation Operator with effect from the publication date shown on the cover sheet. All new entity registrations performed on or after that date SHALL be processed as described here until the document is superseded.

CSTCloud Identity Federation Fee Policy

CSTCloud Identity Federation reserves the right to charge. At the moment, it’s free.

CSTCloud Service Provider Management Standard

The CSTCloud Identity Federation Policy requires that, when acting as a Service Provider Organization, Federation Member MUST ensure that the deployment of each of its Service Providers complies with all the rules defined in this CSTCloud Identity Federation Service Provider Management Standard.

CSTCloud Identity Federation - Data Protection

The CSTCloud Identity Federation Policy requires that, when acting as a Service Provider Organization, Federation Member MUST ensure that the deployment of each of its Service Providers follows all the attribute processing principles defined in this CSTCloud Identity Federation Data Protection Profile for providing access to the protected resources or services.

This requirement is also included in the CSTCloud Identity Federation Service Provider Management Standard.