1. Shibboleth Development and Support Services SDSS Development Federation Next Phase Sandy Shaw, EDINA JISC CM Programme Meeting, Windermere, 14–15 November 2005

2. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20052 Original project goals Implement a development federation … … to support other CM projects … to participate in Internet2 development … to convert EDINA services Gain experience relevant to the creation of a UK production federation

3. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20053 New goals Work with UKERNA to ensure lessons learned in SDSS can be applied to the UK federation Work with UKERNA to ensure SDSS members have a painless transition to the UK federation

4. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20054 Compare and contrast SDSS federation vs UK federation SDSS federationUK federation Status ProjectService Duration 3 yearsOngoing Scale ProgrammeNational HomeEDINA National Data Centre UKERNA

5. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20055 Metadata issues (multi-federation membership) Goal is identical metadata in both (all) federations: 1) Scopes – e.g. @ed.ac.uk or @edinburgh.ac.uk but not both 2) Certificates – commercial CAs accepted by SDSS should be fine – status of SDSS certificates still open 3) Entity names – originally, appeared to be federation-relative urn:mace:ac.uk:sdss.ac.uk:provider:identity:uni.ac.uk – preference now to use federation-independent URIs https://idp.uni.ac.uk/shibboleth

6. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20056 Differences Assuming metadata is preserved, other immediate changes are trivial for members: – differences in enrolment method for new members – new mechanism for requesting amendments – new location for federation metadata – different signature on federation metadata Policy development will bring change

7. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20057 Impact of the transition Modest for SDSS members Policy for eligibility may affect new members – projects? Other ad hoc groups? – experience is that these can coexist with higher assurance members, but may be other issues

8. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20058 Timetable Early days – initial discussions very recent UKERNA's initial role until April 2008 … – … but 2006 will be busy! Transition largely transparent … – same configuration file can be used for both federations more significant change will come with Shibboleth 2.0

9. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 20059 Work items Work on policy to be completed (Core Middleware Advisory Board) – policy notes on SDSS document register Tasks: – plan for federation service – automation tools for enrolment and update requests – testing the Athens gateways – scoping outsourced IdP requirements

10. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 200510 Summary UK federation is on track SDSS is a safe route to it SDSS and UKERNA working to ensure smooth transition between the two … – … initially a copy & paste exercise, with later adaptation appropriate for a national service Staged (behind the scenes) rather than Big Bang

11. Shibboleth Development and Support Services JISC CM Programme Meeting, Windermere 14–15 November 200511 Contacts SDSS project: http://sdss.ac.ukhttp://sdss.ac.uk Contact: edina@ed.ac.ukedina@ed.ac.uk