The Security Operational Baseline provides a reference set of minimum expectations and requirements of the behaviour of those offering services to users, communities, and other participants in a distributed ecosystem leveraging a federated AAI, and of those providing access to services or assembling service components. It aims to establish a sufficient level of trust between all participants to enable reliable and secure operation.