Federation Policy
This document defines the general policy and operational framework of the Taiwan Access Federation (TWAF).
聯邦政策
本文件說明 Taiwan Access Federation（TWAF） 的一般政策與營運架構。
1. Purpose
TWAF provides a federated identity infrastructure for participating research and education organisations in Taiwan. It enables users of participating organisations to access services using identities provided by their home institutions.
1. 目的
TWAF 為臺灣研究與教育機構提供聯邦身分基礎設施， 讓參與機構的使用者能使用所屬機構提供的身分存取服務。
2. Scope
This policy applies to organisations participating in TWAF as Identity Providers, Service Providers, or other recognised federation participants.
2. 適用範圍
本政策適用於以 Identity Provider、Service Provider， 或其他經認可角色參與 TWAF 的機構。
3. Federation Operator
TWAF is operated by Academia Sinica Grid Computing Centre (ASGC).
3. 聯邦營運單位
TWAF 由 Academia Sinica Grid Computing Centre（ASGC）營運。
4. Participant Responsibilities
Participating organisations are responsible for operating their federation services securely, maintaining accurate technical and administrative information, and complying with TWAF federation requirements.
4. 參與機構責任
參與機構應安全地營運其聯邦服務， 維護正確的技術與行政資訊， 並遵守 TWAF 的相關要求。
5. Metadata
TWAF maintains federation metadata describing participating Identity Providers and Service Providers. Metadata registration and management procedures are described separately in the TWAF Metadata Registration Practice Statement (MRPS).
5. Metadata
TWAF 維護參與 Identity Provider 與 Service Provider 的 federation metadata。Metadata 註冊與管理程序另載於 TWAF Metadata Registration Practice Statement（MRPS）。
6. Security
Participants are expected to follow appropriate security practices and cooperate with TWAF in the investigation and resolution of federation security incidents.
6. 資訊安全
參與機構應遵循適當的資訊安全實務， 並配合 TWAF 調查與處理聯邦安全事件。
7. Changes to this Policy
TWAF may update this policy when necessary. Updated versions will be published on the official TWAF website.
7. 政策修訂
TWAF 得視需要更新本政策， 最新版本將公布於 TWAF 官方網站。