obviously, one would not want to establish a separate authentication and authorisation infrastructure for the DCH service and user community, but preferably to consider to use the most suited AA services available in, and being developed for, the research and education community (e.g. eduGAIN REFEDS