glenn wearen 20091203 ifif he anet gwearen
TRANSCRIPT
![Page 1: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/1.jpg)
Federated Access
Glenn Wearen
HEAnet
![Page 2: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/2.jpg)
TerminologySingle Log On
• single point of authentication (e.g ldap)• synchronised account and credentials• authenticate to each application
Single Sign On• single point of authentication
• single credential, single account• authenticate once
![Page 3: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/3.jpg)
TerminologyIdentity Provider
• Organisation that holds identity data/credentials
Service Provider• Organisation accepting federated identities
IdP, SP, OP, RP
![Page 4: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/4.jpg)
TerminologyWeb SSO
– OpenID
– Cardspace (Infocard, Higgins etc.)
– SAML, WS-Trust
– Facebook Connect, Friend Connect
– OAuth
Data exchange
![Page 5: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/5.jpg)
Federated Access in EducationSAML widely adopted in national academic federations
• UK Access Management Federation
• InCommon
• Switch AAI
• HAKA
• Swamid
• AAF
• Surfederatie
• Feide
• GARR Idem AAI
SAML used in other sectors Realty, Aerospace, Automobile, 401k
Confederation
![Page 6: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/6.jpg)
Institutional User Repository
Institutional WebServer
Institutional SAML Server
Service Provider SAML server
Service Provider Web Server
Service Provider User Repository
Federation or Service Provider WAYF Server
Service Provider (SP).
Inst
itutio
n (Id
P).
![Page 7: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/7.jpg)
Federated Access in Education
![Page 8: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/8.jpg)
– IdP’s• Institutes of Technology
• Universities• Private colleges
• Research agencies
Edugate
![Page 9: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/9.jpg)
– SP's• Any IdP can be a SP
• Shared services offered by IdP's• Academic content providers
• Research portals
• Organisations offering academic discount
Edugate
![Page 10: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/10.jpg)
Federation is a web of trust underpinned by...– Policy
• Membership rules– Identity providers must ensure identities are assured
– Service providers must not abuse data protection rules
• Confederation/Interfederation
– Technical• Standard protocol
Membership has its benefits
![Page 11: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/11.jpg)
Management of identity provider– Consent management
– Attribute release
HEAnet assistance to get started– Directory integration for IdP's
– Application integration for SP's
Membership has its benefits
![Page 12: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/12.jpg)
Resource Registry -SP
![Page 13: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/13.jpg)
Resource Registry –IdP (i)
![Page 14: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/14.jpg)
Resource Registry –IdP (ii)
![Page 15: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/15.jpg)
Resource Registry – IdP (iv)
![Page 16: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/16.jpg)
Resource Registry – IdP (v)
![Page 17: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/17.jpg)
Resource Registry – IdP (v)
![Page 18: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/18.jpg)
Future Directions
– Confederation• UK Federation / eduGAIN
– Attribute aggregation• Student account is but one part of a user account
– Who knows?• Schools• Make a 'social' account out of of the 'campus' id.
• National student ID
![Page 19: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/19.jpg)
Summary
Terminology
SAML
Edugate
Join us at www.edugate.ie
![Page 20: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/20.jpg)
![Page 21: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/21.jpg)
![Page 22: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/22.jpg)
![Page 23: Glenn Wearen 20091203 Ifif He Anet Gwearen](https://reader033.vdocuments.us/reader033/viewer/2022060111/55626c8dd8b42a14048b561d/html5/thumbnails/23.jpg)