FEDERATIONS Clair Goldsmith, Ph.D., Associate Vice Chancellor and CIO September 27,

UT SYSTEM FEDERATION 169,000 Students 81, 000 employees 9 General academic institutions 6 Health institutions $8.5 billion budget 16 Stovepipes

IDENTITY MANAGEMENT INITIATIVE What is IDENTITY MANAGEMENT? –Burton Group definition: "A Set of processes, and a supporting infrastructure, for the creation, maintenance, and use of digital identities.“

IDENTITY MANAGEMENT INITIATIVE What is IDENTITY MANAGEMENT? –New policies, processes, trust relationships, authentication and authorization mechanisms, enterprise directories, new applications, etc.

IDENTITY MANAGEMENT INITIATIVE Why is it important? –Current authentication and authorization insufficient for the level of assurance of new internet-based applications –Application security increasingly onerous (multiple applications, multiple enterprises, and multiple user roles in multiple contexts)

IDENTITY MANAGEMENT INITIATIVE Why is it improtant? –Regulations dictate stringent identity management processes HIPAA (health information privacy) FERPA (privacy of educational records) Sarbanes-Oxley (financial disclosures) Gramm-Leach-Bliley Act (financial privacy)

IDENTITY MANAGEMENT INITIATIVE What is the value to the U.T. System? –BPM-66 mandates elimination of SSNs as identifier and the instantiation of a new system-wide identifier by 2007, with integrated, system-wide identity managementBPM-66 –Identity Management infrastructure enables greater synergy and collaboration among UT institutions

IDENTITY MANAGEMENT INITIATIVE What is the value to the U.T. System? –Application security simplified thru common trust fabric, allowing the secure exchange of authentication and authorization attributes System-wide

IDENTITY MANAGEMENT INITIATIVE What is needed? –Trust between all UT institutions –Policies that implement the common trust fabric across the system –A common framework, standards and protocols, for attribute naming, storage, and exchange (LDAP, Shibboleth)

IDENTITY MANAGEMENT INITIATIVE How do we get there? –Statement of DirectionStatement of Direction –Education The Burton Group's Identity Management Workshop for the SLCThe Burton Group's Identity Management Workshop for the SLC Verisign PKI Roadmap The UT System LDAP Workshop

IDENTITY MANAGEMENT INITIATIVE How do we get there? –Implement Middleware architecture, as advocated by the NSF Middleware Initiative (NMI-EDIT)NSF Middleware Initiative (NMI-EDIT) –Outreach activities (e.g. EDUCAUSE "Extending the Reach" Grant)

IDENTITY MANAGEMENT INITIATIVE What are the challenges? –Intra-system identity reconciliation –Building the architecture to be manageable and reliable

IDENTITY MANAGEMENT INITIATIVE Where are we now? –LDAP Workshop, June ’04 –Shibb Fest, September ’04 –UT System Federation Board Appointed Creating Policy Documents –Test Federation ExistsTest Federation Exists