feide connect tnc2014
DESCRIPTION
Feide Connect presentation at TNC2014TRANSCRIPT
![Page 1: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/1.jpg)
Feide ConnectNext generation service platform for educational users in Norway.
[email protected] Åkre Solberg
Dublin, May 2014
![Page 2: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/2.jpg)
Feide Connect
research and development activity
The presented work is from an operational prototypevaries from experimental to more mature
a production-level service is in planning
2
![Page 3: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/3.jpg)
3
The gap between services’ needs and supporting middleware infrastructure
is increasing
![Page 4: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/4.jpg)
What we have today
does not properly support mobile
does not properly support three-tier, services that interacts with services (data in other adm.domains)
Complex setup (SAML)
Complex cross-federation setup
4
![Page 5: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/5.jpg)
5
Today everything is about
APIs
![Page 6: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/6.jpg)
6
SAML is great for SSO - not everything else
![Page 7: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/7.jpg)
Lets build…
![Page 8: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/8.jpg)
8
HTTP
![Page 9: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/9.jpg)
9
HTTPOAuth 2.0
Authorization management
![Page 10: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/10.jpg)
10
HTTPOAuth 2.0
Authorization managementOpenID Connect SCIM
VOOTeduPerson++
3rd party APIs+++PeopleSearch ActivityStreams
![Page 11: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/11.jpg)
11
HTTPOAuth 2.0
Authorization managementOpenID Connect SCIM
VOOTeduPerson++
3rd party APIs+++
App EngineJavascript PaaS
Groups AppStore Feed
DevDashboard
App
Documentation
App
Inspect
App
Authorization Dialog
Workflow
UNINETT [email protected]
![Page 12: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/12.jpg)
Developer Dashboard
![Page 13: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/13.jpg)
13
Groups
Clients
GroupEngineParallell aggregator
SCIM
VOOT
Ad-hocgroups
FSCommon Student System
Feideattributes
Feideattributes
![Page 14: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/14.jpg)
14
Groups Manage
ad-hoc groups
using groups and peoplesearch
APIs
![Page 15: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/15.jpg)
15
ActivityStreams
![Page 16: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/16.jpg)
16
etherpad demo
Non-intrusive etherpad plugin no modifications
No external dependencies whatsoever! Not even simplesamlphp ;)
Uses Feide Connect for authentication and groups.
Setup with auto-configure
![Page 17: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/17.jpg)
17
etherpad demo
![Page 18: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/18.jpg)
18
Clients
API Gatekeeper
3rd party APIs
Authorization workflow Auth
OAuth server
HTTP API+ OAuth
Selfservice
GET /api/0/items HTTP/1.0Authorization: xxxxxHost: 3rd-domain.orgFC-UserID: [email protected]: x001, x002, x009FC-Scopes: readaccessFC-ClientID: 4thparty-org001
3rd.api.feideconnect.edu
established trust
api.3rdparty.org
![Page 19: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/19.jpg)
19
Not solved yet
Still much implementations to do
Contracts and legal work
Payment model
Smooth logout experience with SLO, OAuth, web, applications and mobile.
![Page 20: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/20.jpg)
20
…some more stuff
![Page 21: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/21.jpg)
21
App Store in the works…
![Page 22: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/22.jpg)
22
Frontend protocols service to service
service to platform
Javascript window.postMessage «Federated» iframes with isPassive=true
![Page 23: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/23.jpg)
23
Adobe Connect Widget demoCan be used «anywhere»!
Just copy and paste a short JS sniplet.
Can easily be setup to adopt surrounding group environment, to set «current group».
Fully controlled authorization and access controll for Adobe Connect. No pre-configuration whatsover for endusers.
![Page 24: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/24.jpg)
24
![Page 25: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/25.jpg)
25
Autoconfigure demoSimplify registration of service providers
Can be prepacked with popular applications;in.e. wordpress (plugin demoed)
!Wordpress plugin with no external dependencies.
![Page 26: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/26.jpg)
26
![Page 27: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/27.jpg)
27
feed Widget demo
Widget push shared news or any «activity» to activity stream
Another widget presents «news» within a group in a collaboration service (Liferay)
![Page 28: Feide Connect TNC2014](https://reader034.vdocuments.us/reader034/viewer/2022052507/557f4ce1d8b42ac3288b5283/html5/thumbnails/28.jpg)
2828
Feed Widget!Shows an aggregated feed of activities for the current
selected group across all collaboration tools.
Share widget!Can be easily integrated anywhere. Will share a link to the current web page
to the activity stream for the current user in a selected group context.