strategies for accelerating identity and access management ...€¦ · – a full installation of...
TRANSCRIPT
![Page 1: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/1.jpg)
Tom Barton, Keith Hazelton, Bill Yock
Strategies for Accelerating Identity and Access Management (IAM) in Higher Education
![Page 2: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/2.jpg)
Three Speeches for the Price of One!
Tom Barton Global Access Services for R&E
Keith Hazelton IAM Common FoundaBons, Shareable SoluBons
Bill Yock IAM CommuniBes Past, Present and Future
![Page 3: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/3.jpg)
Global Access Services for R&E
Tom Barton University of Chicago
InCommon Technical Advisory Committee Internet2 Grouper Project Manager
![Page 4: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/4.jpg)
We built a global network
![Page 5: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/5.jpg)
But we didn’t include access services! • The network enables sessions between pairs of endpoints anywhere
in the world – Move data – User activity
• Access policies >> network addresses – Users, roles, credentials, attributes, metadata – Needed even to manage network access, let alone sensitive data or
equipment • Traditional solutions are specific to each resource
– Internal user credentials and role management
![Page 6: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/6.jpg)
Maximum pain, minimum gain, impeding science
My email My cluster
Oh cr*p!!
![Page 7: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/7.jpg)
Focus on science • Virtual Organizations and other collaborations • Research computing provided by campus/lab/facility • Network providing very high bandwidth • Types of activities addressed by the NSF CC*IIE program • Mix of needs for access policies across scientific activities
– Collaborators spread across organizations and nations – Campus/local, Federated, Social, X.509, MFA, higher Level of
Assurance credentials – Range of applications & services supporting collaboration – Specialized computing, storage, and instrumentation resources
• All of the above need to be usable, by scientists, to manage access in support of their work
![Page 8: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/8.jpg)
Everyone else needs this too • Mix of needs for access policies across scientific academic and
administrative activities – Collaborators spread across organizations and nations – Campus/local, Federated, Social, X.509, MFA, higher Level of
Assurance credentials – Range of applications & services supporting collaboration – Specialized computing, storage, and instrumentation resources
• All of the above need to be usable, by scientists anyone, to manage access in support of their work
![Page 9: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/9.jpg)
So we need global access services. What does that look like?
• University/College, Lab, Facility IAM instances • Collaboration platforms/portals for Virtual Organizations (VOs) • On-prem, hosted, and aaS IAM options available to the above • IAM manages identities, credentials, attributes, groups, roles • IAM integration with compute/app, storage, and network resources • All embedded within federation and interfederation to connect
people, their credentials, and their attributes and roles with protected resources
![Page 10: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/10.jpg)
Delegate in order to scale • No one knows what all everyone is permitted to do • So, access management must be widely distributed
– Among organizations & VOs – Within organizations & VOs
• Hence, access management systems must support delegation in addition to identities, credentials, attributes, groups, roles
• Delegation must happen at many scales – Global on down, so that the resulting system works globally – At organizations and VOs on up, where access management needs are
actually known
![Page 11: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/11.jpg)
Globally distributed network management
![Page 12: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/12.jpg)
Globally distributed access management
![Page 13: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/13.jpg)
Delegated access management for UChicago VPN
Different groups, different authorities VPN only uses “vpn:authorized”
allowed denied
student staff
closure
locked vpn:authorized
postdoc = ̶
IRB core business systems IRB
Office IT Security Team
IAM system
![Page 14: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/14.jpg)
Distributed management of Level of Assurance (Silver)
core business systems
self
ID Card Office
self
IT Security
IAM system
![Page 15: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/15.jpg)
Role-backed multi-factor authentication
MFA required
Service Owner
MFA opt-‐in
User
MFA enrolled
IAM System
Silver
MFA Login?
OR AND
Service
1. MFA 2. Silver
IdenBty Provider with MulB Context Broker
Silver? MFA Silver Neither
IT Security
![Page 16: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/16.jpg)
Foundation for global access services • Some mature access management tools • Production deployment at many organizations and some VOs • Mature federation technologies • R&E Federations in many countries • Substantial start on interfederation technologies • Organizations with experienced people supporting and enhancing all
of the above
![Page 17: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/17.jpg)
Major areas of work still ahead • Federation & interfederation
– Expand federation – more participants – Make it easier for international VOs & other collaborations – Make interfederation actually happen
• Lower bar for deployment of these capabilities – More open source IAM products with common APIs – Hosted and aaS IAM offerings available to R&E sector
• Standards for access management objects to be managed and shared between instances – Naming, schema, protocols, bindings
![Page 18: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/18.jpg)
Identity and Access Management (IAM) Common Foundations, Shareable Solutions
Keith Hazelton University of Wisconsin
InCommon Technical Advisory Committee
![Page 19: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/19.jpg)
© 2013 Internet2
[ 19 ]
IAM infrastructure matters, but it is only a means
19 – © 2013 Internet2
![Page 20: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/20.jpg)
© 2013 Internet2
[ 20 ]
IAM: Getting people appropriate access to resources
20 – © 2013 Internet2
![Page 21: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/21.jpg)
© 2013 Internet2
[ 21 ]
Any sufficiently advanced technology is indistinguishable from magic – A. C. Clarke
21 – © 2013 Internet2
![Page 22: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/22.jpg)
© 2013 Internet2
[ 22 ]
IAM: Getting people appropriate access to resources
22 – © 2013 Internet2
![Page 23: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/23.jpg)
© 2013 Internet2
[ 23 ]
IAM: Getting people appropriate access to resources
23 – © 2013 Internet2
![Page 24: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/24.jpg)
© 2013 Internet2
[ 24 ]
• Paradox: You can’t magically disappear until you’re 100% there
• Tom just reminded us of major areas of work still ahead
• One set of challenges for universities and colleges (enterprises)
• Another set for research collaborations (virtual organizations)
• Shared challenge of getting enterprises and VOs to work well together
Our IAM solutions are not yet sufficiently advanced
![Page 25: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/25.jpg)
© 2013 Internet2
[ 25 ]
• IAM infrastructure: Enterprise ecosystems are usually hybrid mix of
– In-house implementations of commercial products
– Open source packages (CAS, Shib, Grouper,…)
– Homegrown Custom engineered pieces
• See the fascinating email thread, “homegrown”, on [email protected]
• To subscribe, send email to [email protected]
• in the body of the message (not the subject line), put: SUBSCRIBE IDM
– Emerging, but not (yet?) widely adopted: IAMaaS
Challenges in enterprise IAM
![Page 26: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/26.jpg)
© 2013 Internet2
[ 26 ]
• Few of us are in a position to rip and replace the hybrid mix
• We replace outgrown or unsupportable components
• We enhance our capabilities by bringing in new components
• What architectural models might support this enterprise reality?
Challenges in enterprise IAM
![Page 27: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/27.jpg)
© 2013 Internet2
[ 27 ]
• Commercial IAM Suites
– Monolithic, product-centric architecture
– Premised on rip and replace (slow motion doesn’t make it less painful)
– Substantial professional service contracts nearly inevitable for deployment
• Open source offerings (the CIFER vision)
– Modular – individual packages address a related set of capabilities – adopt what you need when you need it
– Pluggable – Widely supported protocols (LDAP, SAML), RESTful APIs and/or event-driven messaging as the basis of integration between packages
– Adaptable – Designed for flexible configuration and local extension
– Community (and commercial) support for the packages and for those who use them
Architectural models for hybrid IAM ecosystems
![Page 28: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/28.jpg)
© 2013 Internet2
[ 28 ]
• CIFER has a first-cut comprehensive functional model for IAM
• We can show where existing open source packages cover (or don’t cover) the functional model
• We’re wiring up a platform for demo solutions in a virtual testbed leveraging a selection of open source IAM packages
The current state of open source IAM
![Page 29: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/29.jpg)
© 2013 Internet2
[ 29 ]
IAM functional model
![Page 30: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/30.jpg)
© 2013 Internet2
[ 30 ]
– Scenario: External consultant gets write access to a central IT project wiki and an associated github repository
Supporting real-world access through composed IAM functions
Ac#on Suppor#ng IAM func#onality 1) Consultant (C) gets an email invitaBon from Project Manager (PM) to self-‐register for a university account
Guest account mgmt.; NoBficaBon service
2) C self-‐registers, gets credenBals Guest acct. mgmt.; Enrollment; Source IdM; Registry IdM; CredenBal Issuance
3) PM assigns C to project X as team member Role/Group mgmt.
4) PM gives Project X team members access to a project wiki space and to a project code repository on github
Permission mgmt; Provisioning;
5) C edits wiki, contributes code to repository AuthN; Policy Decision/Enforcement (AuthZ);
![Page 31: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/31.jpg)
© 2013 Internet2
[ 31 ]
• Two years ago there were no open source identity registries
– For source and registry IdM; enrollment;
• Now we have three at various stages of maturity
– Enterprise: Open Registry (an Apereo Incubation Project)
– Enterprise: Central Person Registry (currently based at Penn State)
– Virtual Organizations: COmanage – Includes an identity registry among other components
Plugging one of the gaps
![Page 32: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/32.jpg)
© 2013 Internet2
[ 32 ]
One overlay of open source packages on the functional model
![Page 33: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/33.jpg)
© 2013 Internet2
[ 33 ]
• Potential adopters of one or more open source packages need to see working solutions to problems they are trying to solve
• Here are some of the building blocks already in place
– Penn State's Open Source version of the Central Person Registry
– An instance of 389 Directory Server (LDAP)
– An instance of the Grouper group and permission management package from Internet2
– A full installation of Apache ActiveMQ
– The Apache CAMEL integration package (implementing all the integration patterns found in the Enterprise Integration Patterns book)
– An instance of uPortal
– Coming next: CAS, Shib and the Confluence wiki
IAM Testbed as Demo Platform: Early Days
![Page 34: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/34.jpg)
© 2013 Internet2
[ 34 ]
• First goal will be an end-to-end demo of the external consultant scenario described above
• “The only way of discovering the limits of the possible is to venture a little way past them into the impossible” – A. C. Clarke
IAM Testbed as Demo Platform
![Page 35: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/35.jpg)
IAM Communities Past, Present and Future
Bill Yock
University of Washington
InCommon Steering Commijee, Program Commijee
Chair, Kuali Rice Middleware Project
![Page 36: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/36.jpg)
Agenda
• What “Community Developed” means to me • The Marketecture of Community • Community Areas of Concentration • Coordination across Concentrations • Emerging Birth of a New Community? • The ROI of Getting Involved
![Page 37: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/37.jpg)
What “Community Developed” Means to Me
Many Hands Make Light Work - John Heywood
![Page 38: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/38.jpg)
What “Community Developed” Means to Me
Sometimes confusing, often daunting, hard to
imagine end result!
Finished products may not look pretty but are extremely versatile!
![Page 39: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/39.jpg)
The Marketecture of Community – James L. Hilton and Brad Wheeler, Educause Review, vol. 47, no. 6 (Nov/Dec 2012)
The Marketecture of Community
![Page 40: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/40.jpg)
CommuniBes and Areas of ConcentraBon
Network / InCommon FederaBon Oriented
Internet2
Grouper, COManage,
Net+
Teaching / Learning Oriented
Apereo
CAS, OpenReg
AdministraBon / ERP Oriented
Kuali
KIM
CPR OYSTER
Shibboleth
Sakai Jasig
Buyers Club, CooperaBve CollaboraBve
CooperaBve
CooperaBve
Solo
![Page 41: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/41.jpg)
Network / InCommon FederaBon Oriented
Teaching / Learning Oriented
AdministraBon / ERP Oriented
Internet2 Apereo
Kuali
?
How Do We Get These Communities Working Together?
![Page 42: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/42.jpg)
Coordination is Key
Coordination
Coordination
Coordination
• Roadmap Alignment • Shared Support • Resource
Augmentation
• Interfaces & APIs • Reference Architectures • Test Drive Reference
Implementations
Technical Coordination
Governance Coordination
Easier Harder
![Page 43: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/43.jpg)
Birth of a New Community Structure?
Aligned Comprehensive
Governance (and Strategy) for all higher
education middleware and
services by TIER
![Page 44: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/44.jpg)
The ROI of Getting Involved
![Page 45: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/45.jpg)
Please Help Maximize our Community ROI! Get Involved!
Join a CIFER Coordination Work Group https://spaces.internet2.edu/display/cifer/CIFER+Home Join (or increase your participation in) one of the existing communities: http://www.incommon.org http://www.internet2.edu/communities-groups/groups/middleware/ http://www.apereo.org http://shibboleth.net http://www.kuali.org
![Page 46: Strategies for Accelerating Identity and Access Management ...€¦ · – A full installation of Apache ActiveMQ – The Apache CAMEL integration package (implementing all the integration](https://reader033.vdocuments.us/reader033/viewer/2022050107/5f44e63c4bdb0a0e601eb888/html5/thumbnails/46.jpg)
Thank You!