Federated Authentication at NIH: Trusting External Credentials at Known Levels of Assurance Debbie Bucci and Peter Alterman November, 2009.

Slides:

Advertisements

Similar presentations

NIH-EDUCAUSE PKI Interoperability Project Electronic Grant Application With Multiple Digital Signatures Peter Alterman, Ph.D. Director of Operations Office.

Advertisements

Single Sign-On and Federated Authentication at NIH and Beyond

Overview of US Federal Identity Management Initiatives Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority and Asst. CIO E-Authentication, NIH.

Levels of Assurance: An Overview Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority.

EDUCAUSE 2001, Indianapolis IN Securing e-Government: Implementing the Federal PKI David Temoshok Federal PKI Policy Manager GSA Office of Governmentwide.

Authentication solutions for Outlook and Office 365 Multi-factor authentication for Office 365 Outlook client futures.

Case Studies in Identity Management for Scientific Collaboration 2014 Technology Exchange Jim Basney CILogon This material is.

The SAFE-BioPharma Identity Proofing Process Author of Record SWG (Digital Credentials) October 3, 2012 Peter Alterman, Ph.D. Chief Operating Officer,

Update on federations, PKI, and federated PKI for US feds and higher eds Tom Barton University of Chicago.

PKI in US Higher Education TAGPMA Meeting, March 2006 Rio De Janeiro, Brazil.

U.S. Environmental Protection Agency Central Data Exchange EPA E-Authentication Pilot NOLA Network Node Workshop February 28, 2005.

Dorian Grid Identity Management and Federation Dialogue Workshop II Edinburgh, Scotland February 9-10, 2006 Stephen Langella Department.

1 Trust Framework Portable Identity Schemes Trust Framework Portable Identity Schemes NIH iTrust Forum December 10, 2009 Chris Louden.

The U.S. Federal PKI and the Federal Bridge Certification Authority

EDUCAUSE Fed/Higher ED PKI Coordination Meeting

Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,

Federated Access to US CyberInfrastructure Jim Basney CILogon This material is based upon work supported by the National Science Foundation.

InCommon and Federated Identity Management 1

National Center for Supercomputing Applications University of Illinois at Urbana-Champaign InCommon and TeraGrid Campus Champions Jim Basney

NIH iTrust Peter Alterman/Debbie Bucci National Institutes of Health October 2010.

Single Sign-On, Federated Authentication and Beyond at NIH Dr. Peter Alterman National Institutes of Health.

The Business of Identity Management Barry R. Ribbeck Director Systems Architecture & Infrastructure Rice University

The E-Authentication Initiative: A Status Report Presented at Educause Meeting June 16, 2004 The E-Authentication Initiative.

The E-Authentication Initiative An Overview Peter Alterman, Ph.D. Assistant CIO for e-Authentication, NIH and Chair, Federal PKI Policy Authority The E-Authentication.

1 E-Authentication The E-Authentication/Grants Demonstration.

The U.S. Federal PKI, 2004: Report to EDUCAUSE Peter Alterman, Ph.D. Assistant CIO for E-Authentication National Institutes of Health.

Project Management COE Helen Schmitz, Chief IT Architect (Acting)

The InCommon Federation The U.S. Access and Identity Management Federation

Elements of Trust Framework for Cyber Identity & Access Services CYBER TRUST FRAMEWORK Service Agreement Trust Framework Provider Identity Providers Credential.

1 EAP and EAI Alignment: FiXs Pilot Project December 14, 2005 David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.

U.S. General Services Administration Federal Technology Service November 9, 1999 Judith Spencer Director, Center for Governmentwide Security Office of.

E-Authentication: Enabling E-Government Presented to PESC May 2, 2005 The E  Authentication Initiative.

E-Authentication: Simplifying Access to E-Government Presented at the PESC 3 rd Annual Conference on Technology and Standards May 1, 2006.

Social Identity Working Group Steve Carmody. Agenda Intro to Using Social Accounts Status and Recent News –Current UT Pilot –Current InCommon Pilot with.

Federated Access to US CyberInfrastructure Jim Basney CILogon This material is based upon work supported by the National Science.

An Overview of Single Sign-On, Federation, Its Benefits, and Basic Procedures for Integrating Applications.

Authority of Information Technology Application National Center of Digital Signature Authentication Ninh Binh, June 25, 2010.

PKI and the U.S. Federal E- Authentication Architecture Peter Alterman, Ph.D. Assistant CIO for e-Authentication National Institutes of Health Internet2.

Government-University Identity Management Opportunities Peter Alterman, Ph.D. Chair, U.S. Federal PKI Policy Authority and Assistant CIO/E-Authentication,

The Federal Bridge A Brief Overview 1. 4BF Industry Forum April Fed PKI: View from 20,000 km FBCA C4 Common Policy CA (HSPD-12) CertiPath SSPs.

The Feds and Shibboleth Peter Alterman, Ph.D. Asst. CIO, E-Authentication National Institutes of Health.

Identity Federations and the U.S. E-Authentication Architecture Peter Alterman, Ph.D. Assistant CIO, E-Authentication National Institutes of Health.

Federated Identity Graduates Nate Klingenstein Internet2 APAN 27 高雄台湾, March 3, 2009.

Leveraging the InCommon Federation to access the NSF TeraGrid Jim Basney Senior Research Scientist National Center for Supercomputing Applications University.

1 Federal Identity Management Initiatives Federal Identity Management Initatives David Temoshok Director, Identity Policy and Management GSA Office of.

Authentication and Authorisation for Research and Collaboration Peter Solagna Milano, AARC General meeting Current status and plans.

Federated Identity in Texas Paul Caskey The University of Texas System HEAnet National Conference Kilkenny, Ireland 13 November 2008.

Status Update on Other GFIPM Activity Threads GFIPM Delivery Team Meeting November 2011.

Federated Identity Management at NIH…NIH Login and Beyond Debbie Bucci September 2009.

Transforming Government Federal e-Authentication Initiative David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.

Don Thibeau, Executive Director, OpenID Foundation (OIDF) Drummond Reed, Executive Director, Information Card Foundation (ICF)

National Institutes of Health Interfederation Initiatives Peter Alterman, Ph.D. Assistant CIO for e-Authentication.

E-Authentication briefing for 11th Fed/Ed PKI Meeting Thursday June 16th, 2005.

Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority Meet FedFed.

InCommon Federation: Federating Relationships. Topics Administration Library Research Student Services Personal and Collaborative Applications Federal.

Using PIV Cards with NIH Login Chris Leggett NIH Login Technical Lead CIT/NIH.

10/08/20041 © 2004 Pete Palmer Federated Identity Management and Regional Health Information Organizations Pete Palmer, Principal Security Analyst, Guidant.

Federal Initiatives in IdM Dr. Peter Alterman Chair, Federal PKI Policy Authority.

The Federal E-Authentication Initiative David Temoshok Director, Identity Policy GSA Office of Governmentwide Policy February 12, 2004 The E-Authentication.

Access Policy - Federation March 23, 2016

Federated Identity Management at Virginia Tech

Data and Applications Security Developments and Directions

John O’Keefe Director of Academic Technology & Network Services

Privacy, Security, and Identity Management Update

U.S. Federal e-Authentication Initiative

EDUCAUSE Fed/Higher ED PKI Coordination Meeting

Technical Approach Chris Louden Enspier

HIMSS National Conference New Orleans Convention Center

Presentation transcript:

Federated Authentication at NIH: Trusting External Credentials at Known Levels of Assurance Debbie Bucci and Peter Alterman November, 2009

Page 2 Context Background and History InCommon (Shibboleth-SAML) OpenID PKI and PIV Future Plans integration Services Center (ISC) Contact:

Page 3 About NIH integration Services Center (ISC) Contact: National Institutes of Health (NIH) Part of the U.S. Dept. of Health & Human Services Primary Federal agency for conducting and supporting biomedical research

Page 4 NIH Login integration Services Center (ISC) Contact: NIH Login is the first Federated Identity Management service initiated at NIH and has been in production since February 2003.

Page 5 Consuming Many Credential Technologies, Federations and Trust Framework Providers integration Services Center (ISC) Contact: 1.Validating credentials 2.Processing Levels of Assurance 3.Passing valid assertions and LOA to applications Powered by CA SiteMinder

Page 6 NIH Login Today Supports approximately internal and external 35,000 users Number of systems: –202 Service Level Agreements –450 URLs Over 1 million transactions per day integration Services Center (ISC) Contact:

Page 7 External Users integration Services Center (ISC) Contact: NIH provides financial support to researchers around the world. NIH invests over $28 billion in medical research each year. 7 $28 Billion in Medical Research 83% goes to almost 50,000 competitive grants that support over 325,000 researchers outside of NIH.

Page 8 Website: Contact: NIH Federated Login NIH Federated Login

Page 9 Website: Contact: Federal Government SAML Identity Providers –Northrop Grumman’s GovTrip, InCommon Wiki, Indiana CTS Federated with other HHS agencies –Food and Drug Administration (ADFS 1.0) –HHS Shared Services –Health Resources and Services Administration NIH PIV –Level 3 software certificates at FPKI Medium –Level 4 PIV cards at FPKI High Certificates cross-certified with Federal Bridge –DOD and Aerospace –SAFE Pharma –Other agencies

Page 10 Website: Contact: NIH and InCommon Dec Pilot with NSF FastLane June Signed MOA with InCommon for LOA-1 Aug First InCommon/NIH application –Public Information Officers Federated SharePoint Feb NCRR enabled two major applications –Progress Reports –CTSA wiki In process: NIH Electronic Research Administration systems (LOA-2)

Page 11 Website: Contact: NIH and InCommon – Future LOA - 2 (silver) Pilot with e-Grants –Production expected in FY11 with 200,000 users Additional Services: –Multiple Institute/Center SharePoint instances –Proxy to multiple managed services –Additional scientific wikis

Page 12 Website: Contact: NIH and OpenID Current Status: Full implementation pending OpenID Foundation approval as Trust Framework Provider and Foundation members’ compliance with Federal OpenID profile and scheme Early LOA-1 applications targeting use of OpenID credentials National Library of Medicine Medical wikis Conference registration Regional library access Others Early OpenID providers Google Yahoo AOL Microsoft

Page 13 Website: Contact: Next Steps Production service with OpenID member credential providers InCommon member credential providers at LOA-2 Continue adding NIH and other Agency apps as relying parties Add InfoCard to the mix – open NIH-wide Identity Provider discovery/workflow – need to present a scalable, user-friendly interface

Page 14 Website: Contact: Contact Information NIH Federated Login – – NIHEnterprise Architecture – NIH Enterprise Architecture Community in the NIH Portal