The GÉANT Core AAI Platform

Enabling complex, scalable, and flexible AAI services

The GÉANT Core AAI Platform is the software suite that GÉANT develops to deliver Authentication and Authorisation Infrastructure as a Service (AAISaaS) at scale. Built on open-source components and following the AARC Blueprint Architecture (BPA), established international standards, and community best practices, it is the foundation on which GÉANT builds and operates its AAI services.

The platform powers AAI services such as MyAccessID, MyAcademicID, eduTEAMS, InAcademia, the EOSC Federated AAI, and the EuroHPC Federation Platform, which in turn support major European initiatives including Erasmus+, the European Universities initiative, EuroHPC, and EOSC.

Each AAI service built on the Core AAI Platform acts as an AARC BPA proxy, sitting between identity federations and the resources users need to reach. This model means:

• A common software platform to deliver AAI services, each isolated and tailored to its own community;
• every service interoperates over established standards, including OpenID Connect, OAuth 2.0, and SAML, and connects to eduGAIN and other trusted identity sources;
• new AAI services can be provisioned on demand, rather than built from the ground up; and
• GÉANT operates, secures, and scales the platform, delivering each AAI service as a fully managed service.