How one could issue OpenID Identities in SWITCHaai?
Shibboleth 2.x is a multi-protocol open source platform [6]. So anyone interested could write an extension for the IdP to support OpenID as an additional protocol. That way, each Home Organization installing that extension on their IdP could issue OpenID identities. On the other hand, a gateway consisting of an OpenID identity provider with access controlled by SWITCHaai could issue OpenID identities for SWITCHaai users. For demo purposes and for SWITCH employees only, SWITCH deployed such an issuer based on simpleSAMLphp [7]. Without a life-long digital identity to build on, both options are of limited use as discussed above.
