Feature Matrix

	A	B	C	D	E	F	V
1		Feature	AcademicID	didmos	RegApp	Unity
2	Protocols	SAML SP/IdP	yes/yes	yes/yes	yes/yes	yes/yes
3		OIDC RP/OP	yes/yes	yes/yes	yes/yes	yes/yes
4
5
6	Group Management	VO-based features	yes, auto/manual	yes, e.g. group management	yes, auto/manual	yes; manual/semi-automated
7		Dataset-based authorisation		yes, e.g. via RBAC and scriptable attributes	yes, scriptable
8		External Datasources	yes (synchronization)	yes via synchronization	yes, for attribute import/export	yes for additional attributes
9		Scalability	yes	yes	horizontically, vertically, on-line maintenance	yes
10		Multi-Tenancy	yes	yes	Frontend-URL, UI-Themes	Frontend & theme, but not DN
11
12
13	MFA	Step-Up/MFA Authentication	yes (PrivacyIDEA)	yes (eduMFA)	yes (privacyIDEA, LinOTP, eduMFA)	yes
14		Pass on MFA upstream		in development	in development		Request MFA from upstream
15		Pass on MFA downstream		in development	in development
16
17
18	System	System Requirements	"as-a-Service" operations model	Deployment via Docker Containers or "as-a-Service" model	Java 11/17, JDBC-connectable SQL DB, LB Proxy	Java, SQL DB
19
20
21	Accounts	Automatic User Deprovision	yes (via IDM Lifecycle processes)	yes via didmos Provisioner with connectors to target systems	yes (AQs againt SAML-IdPs)	in preparation
22		Account Linking	yes	in development	yes	yes
23		Consent/Token Management	yes (user selfservice and administrative UI)	Consent: yes via external module, Token Managment: yes, integrated	in development	yes
24
25
26	OIDC	Public Client	yes	yes	yes	yes
27		Dynamic Client Registration	no	can be enabled on request	no	no
28		Client Registration Procedure	email/manual	email / manual	email / manual	webpage / automated + approval
29
30	Infrastructure Proxy Funktionialität				yes (many use cases, especially for HPC)
31	G052	Proxied Token Introspection
32	G061	A specification for IdP hinting (obsoletes AARC-G049)
33	G062	A specification for hinting an IdP which discovery service to use
34	G063	A specification for providing information about an end service
35
36	Policy Support	Policy	AcademicID	didmos	RegApp	Unity
37		Top Level Policy			yes	yes
38		Security Incident Response Procedure			yes	yes
39		Policy for the Processing of Private Data	yes		yes	yes
40		Infrastructure Attribute Profile	yes	yes	yes	yes
41		Proxy Privacy Policy			yes	yes
42		Service Access Policy (optional)
43
44	Guideline Support	Feature	AcademicID	didmos	RegApp	Unity
45	Sirtfi	Collect security contacts for every registered service		yes (can be done in metadata)	yes	yes
46	G021	Exchange of specific assurance information between Infrastructure		yes	yes	yes
47	G025	Guidelines for expressing affiliation information		yes	yes	yes
48	G026	Guidelines for expressing community user identifiers		yes	yes	yes
49	G027	Specification for expressing resource capabilities		yes	yes	yes
50	G031	Guidelines for evaluating the combined assurance of linked identities		no (in development)	in development	no
51	G045	AARC Blueprint Architecture 2019	yes	yes	yes	yes
52	G057	Inferring and constructing voPersonExternalAffiliation		yes	yes	in preparation
53	G061	A specification for IdP hinting (obsoletes AARC-G049)		no	no	no
54	G062	A specification for hinting an IdP which discovery service to use		no	no	no
55	G063	A specification for providing information about an end service		no	yes (but not according to specification)	no
56	G069	Expressing group and role information (supersedes AARC-G002)		yes	yes	yes
57	G071	Guidelines for Secure Operation of Attribute Authorities		in preparation	partially
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100