olat - online learning and training...1 olat - online learning and training aai info-day 7. december...
TRANSCRIPT
![Page 1: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/1.jpg)
1
OLAT - Online Learning And TrainingAAI Info-Day 7. December 2004
Florian Gnägi, Mike Stock
Multimedia & E-Learning Services, University of Zurich
![Page 2: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/2.jpg)
2 © 2004 Multimedia & E-Learning Services, University of Zurich
Agenda
• AAI implementation in OLAT– Goals– Workflow and Implementation– Major Issues
• OLAT Live Demo– AAI login– User mapping– Course preconditions
• Questions and Answers
![Page 3: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/3.jpg)
3 © 2004 Multimedia & E-Learning Services, University of Zurich
Goals
• Seamless integration of AAI/Shibbolethinto OLAT from a user‘s point of view
• Co-existence of AAI/Shibboleth withalternative authentication mechanisms
• Minimal setup requirements foradministrators– No additional software needed– Configuration of AAI/Shibboleth within OLAT
![Page 4: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/4.jpg)
4 © 2004 Multimedia & E-Learning Services, University of Zurich
Workflow
AAI enabled University OLAT
SHIRE / WAYFHandle Service
Attribute Authority SHAR
RM (OLAT User Manager)
1
3
4
56
7
OLAT Welcome
2
OLAT Login
AAI/Shibboleth Origin AAI/Shibboleth Target
AQHR
HandlePackage
1) Browse to www.olat3.unizh.ch2) Choose authentication method3) Redirect to HS4) SAML Browser/POST Profile (asynch)5) Handle Validation6) SAML SOAP/HTTP Binding (synch)7) Authentication success
AQM
ARM
![Page 5: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/5.jpg)
5 © 2004 Multimedia & E-Learning Services, University of Zurich
Implementation
• Implementation of SHIRE, WAYF andSHAR in OLAT (Java/Tomcat)
• Based on freely available OpenSAML• WAYF based on Shibboleth Origin
Reference Implementation• SHIRE/SHAR implementation based on
OpenSAML code reviews and ShibbolethArchitecture DRAFT v05
![Page 6: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/6.jpg)
6 © 2004 Multimedia & E-Learning Services, University of Zurich
Features
• Configuration within olat_config.xml• WAYF includes sites.xml watchdog• Handle validation according to Shibboleth
Architecture DRAFT– I.e. Issuer, Issue Instant, Recipient, Signature,
Subject IP and optional Client Cert validation (outsidestandard’s scope)
• Attribute translation and propagation withinOLAT
• OLAT user profile mapping• Generic Shibboleth implementation
![Page 7: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/7.jpg)
7 © 2004 Multimedia & E-Learning Services, University of Zurich
Major Issues (1/2)
• Missing AAI attributes– Students registering in a minor field of study
grant access through OLAT groups– Assistants and professors
Uni ZH specific solution– Missing registration number (Matrikelnummer)
Uni ZH specific solution
• No logout defined by Shibboleth standard– Users working at same computer may take
over accounts by accident
![Page 8: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/8.jpg)
8 © 2004 Multimedia & E-Learning Services, University of Zurich
Major Issues (2/2)
• User acceptance– AAI certificates not signed by known root CA– User is unfamiliar with AAI and its concept of
redirecting to Home Site for authentication
• Browser issues– Session lost after redirects with Netscape 7.0
• OpenSAML library patches needed– Send SAMLRequests’ IssueInstant w/o millis– Allow custom Trust Manager in SOAPBinding
![Page 9: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/9.jpg)
9 © 2004 Multimedia & E-Learning Services, University of Zurich
Live Demo
![Page 10: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/10.jpg)
10 © 2004 Multimedia & E-Learning Services, University of Zurich
Multimedia und E-Learning Services,University of Zurichhttp://www.id.unizh.ch/mels/[email protected]
OLAT Main Serverhttp://www.olat3.unizh.ch(Login as Guest)
OLAT Open Source Projecthttp://www.olat.org
Information Sources
![Page 11: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/11.jpg)
11 © 2004 Multimedia & E-Learning Services, University of Zurich
Questions & Answers
http://www.olat.org
![Page 12: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/12.jpg)
12 © 2004 Multimedia & E-Learning Services, University of Zurich
Live Demo (Screenshots)
The following slides providescreenshots of the live demo.
![Page 13: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/13.jpg)
13 © 2004 Multimedia & E-Learning Services, University of Zurich
OLAT Login Screen
![Page 14: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/14.jpg)
14 © 2004 Multimedia & E-Learning Services, University of Zurich
Handle Service Uni ZH
![Page 15: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/15.jpg)
15 © 2004 Multimedia & E-Learning Services, University of Zurich
Registration (1/3)
![Page 16: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/16.jpg)
16 © 2004 Multimedia & E-Learning Services, University of Zurich
Registration (2/3)
![Page 17: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/17.jpg)
17 © 2004 Multimedia & E-Learning Services, University of Zurich
Registration (3/3)
![Page 18: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/18.jpg)
18 © 2004 Multimedia & E-Learning Services, University of Zurich
OLAT Home
![Page 19: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/19.jpg)
19 © 2004 Multimedia & E-Learning Services, University of Zurich
Course for Uni ZH students
![Page 20: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/20.jpg)
20 © 2004 Multimedia & E-Learning Services, University of Zurich
Course for all other students
![Page 21: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/21.jpg)
21 © 2004 Multimedia & E-Learning Services, University of Zurich
Course: AAI Preconditions
![Page 22: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/22.jpg)
22 © 2004 Multimedia & E-Learning Services, University of Zurich
Admin: Session view
![Page 23: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/23.jpg)
23 © 2004 Multimedia & E-Learning Services, University of Zurich
Admin: Authentications view
![Page 24: OLAT - Online Learning And Training...1 OLAT - Online Learning And Training AAI Info-Day 7. December 2004 Florian Gnägi, Mike Stock Multimedia & E-Learning Services, University of](https://reader034.vdocuments.us/reader034/viewer/2022051905/5ff740eb802e986a114e46f0/html5/thumbnails/24.jpg)
24 © 2004 Multimedia & E-Learning Services, University of Zurich
Admin: Authentications view