jane charlton intro to f a m
DESCRIPTION
TRANSCRIPT
Joint Information Systems Committee 04/09/23 | | Slide 1Joint Information Systems Committee Supporting education and research
JISC Services Briefing: Access Management
What are the benefits?
Jane Charlton, JISC
28 September 2007
Joint Information Systems Committee 04/09/23 | | Slide 2
JISC Services Briefing: Access Management
•What is Federated Access Management?
•Why change & what are the benefits?
•UK Access Management Federation
•JISC support
•Further information
Joint Information Systems Committee 04/09/23 | | Slide 3
What is Federated Access Management?
Federation: group of organisations signed up to agreed set of policies for information exchange
Access management: managing user access to resources and services
Information exchange
Institution(authenticates)
Service provider (authorises)
secure, controlled access
Joint Information Systems Committee 04/09/23 | | Slide 4
How it works
Identity Provider (IdP) Service Provider (SP)
Browser user
Joint Information Systems Committee 04/09/23 | | Slide 5
Joint Information Systems Committee 04/09/23 | | Slide 6
How it works
Identity Provider (IdP) Service Provider (SP)
Browser user
Joint Information Systems Committee 04/09/23 | | Slide 7
Joint Information Systems Committee 04/09/23 | | Slide 8
How it works
Identity Provider (IdP) Service Provider (SP)
Browser user
Joint Information Systems Committee 04/09/23 | | Slide 9
Joint Information Systems Committee 04/09/23 | | Slide 10
Joint Information Systems Committee 04/09/23 | | Slide 11
How it works
Authentication
Authorisation
Attribute Request
Identity Provider (IdP) Service Provider (SP)
Browser user
Joint Information Systems Committee 04/09/23 | | Slide 12
Joint Information Systems Committee 04/09/23 | | Slide 13
JISC Services Briefing: Access Management
Why change and what are the benefits?
Joint Information Systems Committee 04/09/23 | | Slide 14
Why change?
Federated access management offers more benefits than legacy systems
– More choice and flexibility
– More security
– Less workload
– Better user experience
Joint Information Systems Committee 04/09/23 | | Slide 15
Benefits for users
Fewer username and passwords to remember
Access anytime, anywhere
Personalisation – ‘my saved searches’, ‘my favourites’, email alerts
Personal data stored by home institution, not service provider - less need to disclose identity
Joint Information Systems Committee 04/09/23 | | Slide 16
Benefits for organisations
One username and password for multiple services (internal and external)
– potential increase in use of services
– reduces workload for organisations
More choice and flexibility
– no tie-in to one provider for software or support
– freely available open source software
Based on International standards
Joint Information Systems Committee 04/09/23 | | Slide 17
Choices
OPTION COSTS BENEFITS
1. Full member of the Federation using community supported tools
Internal effort to implement software, join Federation and manage provider attributes
No ongoing subscription costs, compliance with international standards and institutional requirements
2. Full member of the Federation using tools with paid-for support
Cost of supplier support and internal effort in liaison with supplier and Federation
Full support in implementation, compliance with international standards and institutional requirements
3. Continue with Athens or other access management solution
Continue to pay current Athens subscription and licence costs to Eduserv
Athens providers have access to Federation through the ‘gateway’, funded by JISC until July 2008
Joint Information Systems Committee 04/09/23 | | Slide 18
International take-up
Adoption of international standards for interoperability
Economies of scale: build skills-base on one technology to support wide range of customers - reduced costs in time and resources
Federations in operation: Croatia, Finland, France, Norway, Switzerland, UK, USA
Federations in development or testing: Australia, Belgium, Denmark, Germany, Netherlands, New Zealand, Spain, Sweden
Joint Information Systems Committee 04/09/23 | | Slide 19
JISC Services
Lead by example & practice what we preach
– JISC directory service
Consistency across JISC Services
Added value – can be used for many services eg. cms, wikis, blogs, email
Demonstrating JISC resources – register as an Identity Provider via legal entity
Joint Information Systems Committee 04/09/23 | | Slide 20
JISC Services Briefing: Access Management
UK Access Management Federation
Joint Information Systems Committee 04/09/23 | | Slide 21
Joint Information Systems Committee 04/09/23 | | Slide 22
The UK Access Management Federation
Launched November 2006
Jointly funded by JISC and Becta
Hosted by JANET (UK)
– Schools, FE, HE and Research
– Organisations and institutions providing services to these sectors
Policy Board (stakeholder reps)
Technical Advisory Group (all sectors)
Joint Information Systems Committee 04/09/23 | | Slide 23
The UK Access Management Federation
Federation operators, JANET (UK):
– Manage membership applications
– Verify organisations are eligible to join
– Monitor federation members
– Resolve problems within the Federation
Joint Information Systems Committee 04/09/23 | | Slide 24
Choices
Joint Information Systems Committee 04/09/23 | | Slide 25
The UK Access Management Federation
No membership fee, easy to join
Support team
– Advice and guidance for institutions and organisations
– Documentation (policy and technical)
– Training courses and workshops
www.ukfederation.org.uk
Joint Information Systems Committee 04/09/23 | | Slide 26
JISC Services Briefing: Access Management
JISC Support
Joint Information Systems Committee 04/09/23 | | Slide 27
JISC support
Funding Athens until July 2008
Funding development of Athens gateways to support inter-working between Shibboleth and Athens sites and service providers until July 2008
Support materials eg. reports, case studies, toolkits and advice
Support from Access Management Outreach Team
Joint Information Systems Committee 04/09/23 | | Slide 28
Further information
JISC
– www.jisc.ac.uk/federation
UK Access Management Federation
– www.ukfederation.org.uk
Joint Information Systems Committee 04/09/23 | | Slide 29
JISC Services Briefing: Access Management
Thank you for listening – any questions?
Jane Charlton, JISC