Presented by: Doug Falk National Student Clearinghouse Student Access to Federal Loan Data and Other Online Student Services

Agenda 4/26/20152 Clearinghouse Overview Student Self-Service (SSS) SSS Challenges Shibboleth Implementation Shibboleth Challenges

What is the Clearinghouse? 4/26/20153 A non-profit organization serving as a centralized educational agent in fulfilling educational reporting needs

Nationally More than 3,200 collegiate institutions –Enrolling over 92% of all higher education students More than 2,000 high schools 4/26/20154 Current Clearinghouse Participation

 Campus-based authentication with single sign-on to SSS  Through SSS, institutions can enable their students to perform a wide range of enrollment verification activities via the Web for free, including: Print enrollment certificates (which they can send to health insurers, housing providers and others) View enrollment history Check enrollment verifications that the Clearinghouse has provided to student service providers on their behalf View student loan deferments Link to real-time information on their student loans via Meteor 4/26/20155 Student Self-Service (SSS)

4/26/20156 Student Self-Service

4/26/20157 Student Self-Service

4/26/20158 Student Self-Service

4/26/20159 Student Self-Service

4/26/ Student Self-Service

4/26/ Student Self-Service  Institution requirements: –Sign Clearinghouse SSS Agreement Certify that they are in compliance with NIST electronic authentication guidelines for assurance level 1 (“standard” SSS access) Optionally certify that they are in compliance with NIST electronic authentication guidelines for assurance level 2 (“enhanced” SSS access including Meteor) –Implement the Clearinghouse specified methods for server-to-server authentication –Provide proper authentication of students

4/26/ Student Self-Service

 Currently, there are around 500 institutions using SSS. Current challenges include: Requires custom coding at each institution Disparate authentication methods deployed by institutions Clearinghouse places a high level of trust with institutions to properly authenticate students Clearinghouse uses a proprietary method for establishing sessions Difficulty complying with NIST authentication guidelines Institutional use of SSN as student identifier 4/26/ SSS Challenges

 Implementing Shibboleth will provide: Easier implementation for participating InCommon institutions A robust, common framework for authentication and transitive trust A federation that governs rules for access and participation A system based on industry standards 4/26/ Shibboleth Implementation

4/26/ Shibboleth Implementation  Institution requirements: –Sign Clearinghouse SSS Agreement Certify that they are in compliance with NIST electronic authentication guidelines for assurance level 1 (“standard” SSS access) Optionally certify that they are in compliance with NIST electronic authentication guidelines for assurance level 2 (“enhanced” SSS access including Meteor) –Join InCommon Federation –Implement Shibboleth in accordance with InCommon specifications –Provide proper authentication of students

4/26/ Use Case 1: School First

4/26/ Use Case 2: NSC First

 Currently, the Clearinghouse is piloting the Shibboleth implementation with Stanford University: Institution still must comply with NIST authentication guidelines Clearinghouse looking at InCommon Bronze and Silver assurance levels Institutional use of SSN as Shib Target Id Target Id can be an institutional Student Id, however: Clearinghouse follows PESC SchoolAssignedPersonID spec (20 characters) Institutional desire to use an opaque ID (much longer that 20 characters) Requires change to the Clearinghouse enrollment file extract (takes years for SIS providers to change) 4/26/ Shibboleth Challenges

4/26/ Contact Doug Falk (703)