| Info | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||
This is the third step in our connection plan. Don't rush and jump to our step by step guide if you got lost!
|
This page will guide you through any contractual aspects that need to be taken care of prior to connecting your service to the production environment of SURFconext.
Introduction
Every time a user logs in via SURFconext, user-information is transferred from the institution, via SURFconext, to your service. Based on what you agreed, as a Service Provider you may receive data from the Identity Provider/Attribute Provider:
- for the authentication (the proof of authentication by the Identity Provider);
- for authorisation decisions within your service;
- about the group memberships of a user if such is required for cooperation and authorisation within the service provided;
- extra data from a user relevant to the service.
We basically have two situations:
- You are a SURF member (an institution): please read here what to check for
- In other cases, you most likely will need to sign a SURFconext connection agreement, see below.
- SURF does not sign a data processing agreement (DPA, Dutch: verwerkersovereenkomst) with service providers: if a DPA is necessary, that needs to be signed between you as supplier of the service and every institution.
SURFconext Connection Agreement (Dutch: aansluitovereenkomst)
A contract needs to be signed before promoting your service to the SURFconext production environment to document rights and obligations of involved parties. You can download the template linked below to see in advance what the agreement entails.
| Warning |
|---|
|
| Version | Template connection agreement | |
|---|---|---|
| Dutch | 1.05 | Template aansluitovereenkomst SURFconext_v1.05_NL + brief.pdf (incl. aanbiedingsbrief) |
| English | 1.05 | Template Connection Agreement SURFconext_v1.05_EN + brief.pdf (incl. accompanying letter) |
See previous versions of the SURFconext Connection Agreement
| Anchor | ||||
|---|---|---|---|---|
|
For SURF members offering a service
Commercial vendors
If you offer commercial services and/or you are not a SURFnet member and not connected to SURFconext as an Identity Provider, you must send a mail to support@surfconext.nl to start the contractual part. SURFnet will do an intake and bring you in contact with SURFmarket.
SURFnet members
...
, the procedure is as follows:
- Check if there is a relevant SURFconext contract.
If you are registered as a SURFconext Identity Provider (check here), you can assume this is done. In case of doubt, contact
...
- support@surfconext.nl.
- Adhere to the SURFconext Privacy Policy.
...
- Inform the person in your
...
- organisation responsible for SURFconext (role SURFconextverantwoordelijke) that you are going to connect a service to SURFconext.
...
- SURF needs explicit consent from the person with this role before your service can be connected.
- That's it for the contractual part: continue with any other steps left!
| Anchor | ||||
|---|---|---|---|---|
|
Previous versions of the documents on this page can be found below: