- The ACOnet Identity Federation Policy spells out the rules governing the Federation and is binding for all federation members.
- To join the Federation in an Identity Provider (IDP) role, i.e., to also expose user identities to the Federation, members must be ACOnet participants, and sign the supplemental agreement covering ("Zusatzvereinbarung") covering federation services. For ACOnet participants, the supplemental agreement also covers any Service Providers they may want to operate.
- To only supply services to existing IDPs in the Federation, i.e., acting solely in a Service Provider (SP) role, the SP-Agreement needs to be signed.
- Specific federation services are detailed in Technology Profiles, of which there are currently two: