Delegated authentication via Shibboleth

If your institution participates in DFN-AAI, there is no need to register with RADAR. RADAR supports Shibboleth and allows you to log in with your institutional account.

Users from institutions that participate in the German Shibboleth Federation DFN-AAI (Deutsches Forschungsnetzwerk Authentifikations- und Autorisierungs-Infrastruktur) can use RADAR without explicit registration by authenticating themselves with their institutional user ID.

The home institution must be selected in the login option "Via your institutional account". Authentication is then carried out against the identity provider of this institution. The internal login name and password are not disclosed to RADAR. Authentication against RADAR is done - invisibly for users - via a one-time token. Following approval by the user, the identity provider only sends RADAR a pseudonymous user ID and the email address (both mandatory fields) as well as the full name (optional) as authentication attributes. RADAR uses this data to create a proxy account to which roles can be assigned by the institution's local administrators.

Attributes for the Authentication via DFN-AAI:

	Attribute	LDAP-Name	Object class
Mandatory fields	Pseudonymous, provider-specific identifier	eduPersonTargetedID	eduPerson
	Emailaddress (Service)	mail	inetOrgPerson
Optional fields	Family name	sn (surname)	person
	Given name	givenName	inetOrgPerson