InCommon Officials
InCommon Executive, Federation Site Administrator, Certficate Service RAO
This page includes:
- Definitions of the roles
- Instructions for changing the InCommon Executive
- Instructions for changing the Federation Site Administrator
- Instructions for changing the RAO for the Certificate Service
Roles
InCommon Executive: The InCommon Executive represents the participant organization regarding all decisions and delegations of authority for the responsibilities of InCommon Participants, including but not limited to, all relevant federation and certificate services. This includes payment of invoices, and assigning any person in the trusted administrator role (see below) for the InCommon Federation and as the Registration Authority Officer (RAO) for the InCommon Certificate Service. The executive is authorized as such in the InCommon participation agreement or by succession from the originally named executive. The executive role will typically be filled by a CIO, VP of IT, or other senior administrative officer responsible for the organization's information technology assets.
Federation Site Administrator: The Federation Site Administrator serves as the participating organization's primary registrar. The administrator is responsible for registering and maintaining the policies and technical data related to the organization's participation in the InCommon Federation, including the submission of the URL of the Participant's POP and any Identity Provider and/or Service Provider metadata and associated certificates. The administrator is assigned by the participating organization's designated executive. Each InCommon participant can have up to two Federation Site Administrators.
Certificate Service Registration Authority Officer (RAO): The Certificate Service RAO has privileges to request and manage certificates for domains owned and controlled by that person's organization. RAOs can also create departments and can request or approve the creation of DRAOs (Department Registration Authority Officers). Each InCommon participant can have up to three RAOs.
Changing Your InCommon Executive
Send a letter (on the organization's letterhead) signed by the organization attesting to the new InCommon Executive's role and work-related personal information: Name, Title, Email, Trusted Phone, Address.
This can be as simple as using the template we have provided (this is a Word document -- please place this on your organization's letterhead), having the letter signed, then scanning and emailing it to admin AT incommon.org. We'll then schedule a short phone call with the new Executive for identity-proofing.
Changing the Federation Site Administrator
Each organization participating in the InCommon Federation can have one or two Site Administrators.
If you need to add or change a Site Administrator, the designated InCommon Executive should email InCommon (admin AT incommon.org) with the information about the new Site
Administrator, as noted below. We will then schedule a call with the
Executive via the verified phone number. This phone call will take
just five minutes. Once the Executive has officially authorized the
new Site Administrator, InCommon will call to identity-proof the new
Site Administrator and provide credentials for the InCommon Site Admin
registry/interface.
Name:
Title:
Email:
Phone:
Address:
Changing the RAO for the Certificate Service
Each InCommon Certificate Service subscriber can have up to three RAOs (Registration Authority Officers).
If you need to add or change an RAO, the designated InCommon Executive should email InCommon (admin AT incommon.org) with the information about the new RAO, as noted below. We will then schedule a call with the
Executive via the verified phone number. This phone call will take
just five minutes. Once the Executive has officially authorized the
new RAO, InCommon will call to identity proof the new
RAO and provide credentials for the Certificate Manager (CM) interface.
Name:
Title:
Email:
Phone:
Address:
|
