IDP in the Cloud
Identity as a Service
Contacts
+06 4962 2000
IDP in the Cloud (Identity as a Service)
IDP in the Cloud is GARR's Identity as a Service solution, designed for organizations within the GARR community. It adheres to the standards of the IDEM Federation and is compatible with the eduGAIN Interfederation framework.
How to apply for the service?
FAQs
FAQs
Who is IDP in the Cloud designed for?
IDP in the Cloud is GARR's Identity as a Service solution, designed for organizations within the GARR community. It adheres to the standards of the IDEM Federation and is compatible with the eduGAIN Interfederation framework.
How can I activate the IdP in the Cloud service for my institution?
To activate the IdP in the Cloud service, please contact the IDEM service at
What services can I access with my IdP in the Cloud account?
Your IdP in the Cloud account allows you to access all federated resources registered within the IDEM Federation (IDEM Resources) and all resources in the eduGAIN inter-federation.
Note: Access for end users may be subject to agreements or contracts between your institution and the resource provider. To find out if an agreement has been established for accessing a specific resource, please contact your institution's Identity Provider administrator. Refer to the IDEM Identity Services page for a list of contacts.
How can I activate the second factor for my account?
The second factor (via TOTP Code through an app or OTP Code via email) can be enabled during the activation of your account.
Can I activate the second factor at a later time?
Certainly, the second factor can be enabled within your account management. Simply navigate to the Account Management page, click on Actions, and then select Request Second Authentication Factor.
Note: To activate the second factor 'OTP via email', it is necessary to provide an email address different from the one used to access the service.
I can no longer access my authentication app or secondary email; what should I do?
If you no longer have access to your authentication app or secondary email, you can request the cancellation of the OTP code from your IdP Admin. After the cancellation, the second factor via OTP Code can be enabled within your account management. Simply navigate to the Account Management page, click on Actions, and then select Request Second Authentication Factor.
Can I request the activation of multiple types of authentication second factors?
Certainly, it is possible to request the activation of multiple types of second authentication factors, but you can only have one active second factor per type.
Why did I receive an invitation to activate my IdP in the Cloud account?
An administrator from your affiliated institution has entered your information into the platform. If you are a researcher, the administrator received the data directly from the Research Workflow. If you are part of the staff at an institution, the administrator is the contact person for the Identity Provider of your affiliated institution.
Account Activation
To activate your account, simply follow the link contained in the activation message you received and proceed to create a new password.
IdP in the Cloud is the Identity as a Service solution for organizations within the GARR community
Who is IDP in the Cloud designed for?
IdP in the Cloud is the Identity as a Service (IDaaS) solution for organizations within the GARR community, designed to comply with the IDEM Federation and eduGAIN Interfederation standards. This service provides secure access to thousands of federated web resources.
By subscribing to the service, institutions can significantly reduce the costs associated with federated access, particularly the integration of their digital identity management systems with IDEM and eduGAIN.
The service is tailored for organizations with limited resources, small IT staff, or smaller, partitioned communities (such as IRCCS, Scientific Institutes for Research, Hospitalization, and Healthcare). Currently, it serves 41 institutions, supporting around 3,500 users and handling 8,000 authentications annually.
While these may not seem like large numbers in absolute terms, IdP in the Cloud is vital for enabling these institutions to access a wide range of GARR services (Filesender, GARR Cloud, GARR Meet, SCARR, GINS), research services, bibliographic resource reservation systems (such as Nilde), scientific journals, and more.
For organizations of any size
Small
They receive a cutting-edge IAM solution even without dedicated or specialized staff, accommodating up to 100 users.
Medium
Users require less assistance from the IT help desk, allowing the IT staff to dedicate more time to improving services, accommodating between 100 and 1,000 users.
Big
Service activation processes are expedited, making it possible to integrate all applications, even those used by a small number of users. Compliance is maintained under control, and hardware costs can be outsourced. This solution accommodates over 1,000 users.
Less integration
Applications integrate easily
Fewer tickets
Self-service portal for password change
Provisioning and deprovisioning
Activation and deactivation occur automatically
Less fragmentation
All access data for all applications are recorded in a single location
Secure access for students, faculty, staff, and external users
SIMPLE, FAST, SECURE
SIMPLE
Immediate activation of the IdP even without specialized skills in Identity & Access Management technologies.
FAST
Activation and deactivation of users, on-premise and cloud applications, and access from any device, including mobile.
SECURE
Ensuring the integrity of access for each user, utilizing security standards (SAML), and complying with IDEM and eduGAIN requirements.
UNIFIES ACCESS
Provides access to hundreds of selected and approved applications by the organization.
SECURES EVERY DEVICE
Ensures secure access from the office, laboratory, home, and on the go.
APPLIES ACCESS POLICIES
Defines roles, privileges, assurance levels, and strengthened authentication contexts.
SIMPLIFIES REPORTING
Provides easy statistics on who accessed what.
APPLY FOR THE SERVICE
To activate the IdP in the Cloud service, you can contact the IDEM service at idem-help@garr.it.
Your IdP in the Cloud account allows you to access all federated resources registered within the IDEM Federation and all resources in the eduGAIN inter-federation.
Note: Access for end users may be subject to agreements or contracts between your institution and the resource provider. To find out if an agreement has been established for accessing a specific resource, please contact your institution's Identity Provider administrator. Refer to the IDEM Identity Services page for a list of contacts.