Current Middleware Picture Tom Barton University of Chicago Tom Barton University of Chicago.

Slides:

Advertisements

Similar presentations

04 June 2002, TERENA, Limerick MACE: Directories at Work Keith Hazelton, Senior IT Architect, Univ. of Wisconsin-Madison Chair, MACE-Dir Working Group.

Advertisements

Towards Common Identity Services Tom Barton University of Chicago.

Access & Identity Management “An integrated set of policies, processes and systems that allow an enterprise to facilitate and control access to online.

NSF Middleware Initiative: Managing Identity on Campus Michael R Gettes, Duke University Tom Barton, University of Chicago.

Managing Authorization with Signet and Grouper Tom Barton, University of Chicago Lynn McRae, Stanford University Tom Barton, University of Chicago Lynn.

Integration Technologies for Grouper & Signet Tom Barton, U Chicago Joy Veronneau, Cornell Gary Brown, U Bristol Lynn McRae, Stanford.

CAMP: Building a Distributed Access Management Infrastructure Lynn McRae, Stanford University Denver, Nov 7-9, 2006.

Practices from the Field NSF Middleware Initiative: Identity and Privilege Management Model Michael Gettes, Duke University Jim Phelps, UW-Madison EDUCAUSE.

Recent Developments in Directories Tom Barton, University of Chicago Keith Hazelton, University of Wisconsin.

A Middleware Unified Field Theory Identity Management / Directories Privileges / Groups Single Sign-On / Federation Enterprise Integration from network.

Internet2 MACE Identity and Access Management (IAM) Projects integ-tb-kh-02.ppt Keith Hazelton, U Wisconsin With help.

UCLA’s Shibboleth Plan Shibboleth is an integral part of UCLA’s Enterprise Directory & Identity Management Infrastructure (EDIMI) Project Integrate with.

Peter Deutsch Director, I&IT Systems July 12, 2005

Introduction to Grouper. Open source, community-driven project of the Internet2 Middleware Initiative Initial release v0.5 in December 2004 Grouper originally.

NSF Middleware Initiative: GridShib Tom Barton University of Chicago.

Widely Distributed Access Management Tom Barton University of Chicago.

CAMP Med Mapping HIPAA to the Middleware Layer Sandra Senti Biological Sciences Division University of Chicago C opyright Sandra Senti,

Welcome to CAMP Identity Management Integration Workshop Ann West NMI-EDIT EDUCAUSE/Internet2.

Introduction to Group Management Tom Barton, Blair Christensen University of Chicago.

A Model for Enterprise Group and Affiliation Management RL “Bob” Morgan University of Washington CAMP, June 2005.

Signet and Grouper for Distributed Attribute Administration

Intro to Identity for Developers Tom Barton, U Chicago Scott Cantor, Ohio State Patrick Michaud, U Washington.

Authorization Scenarios with Signet RL “Bob” Morgan University of Washington Internet2 Member Meeting, September 2004.

Introduction to Grouper Part 1: Access Management & Grouper Tom Barton University of Chicago and Internet2 Manager – Grouper Project.

Directory Services at UMass  Directory Services Overview  Some common definitions  What can a directory do or not do?  User Needs Assessment  What.

I2/NMI Update: Signet, Grouper, & GridShib Tom Barton University of Chicago.

Maturation & Convergence in Authentication & Authorization Services in US Higher Education: Keith Hazelton, Sr. IT Architect, University.

Access Management with Grouper Tom Barton University of Chicago.

Integrated Identity and Access Management with I2MI Tools Integ-tb-kh-01.ppt Tom Barton, U Chicago Keith Hazelton,

Federated Identity and the International Research Community Dr Ken Klingenstein Director, Internet2 Middleware and Security.

Australian Access Federation and other Middleware Initiatives Presented at TF-EMC2, Prague 4 Sep 2007 Patty McMillan, The University of Queensland.

Intro to Grouper There’s nothing fishy about Identity Management with Grouper.

KUALI IDENTITY MANAGEMENT Provides services for Identity and Access Management in Kuali Integrated Reference Implementations User Interfaces An “integration.

Directories Keith Hazelton, University of Wisconsin Brendan Bellina, University of Notre Dame Tom Barton, University of Chicago.

NSF Middleware Initiative Renee Woodten Frost Assistant Director, Middleware Initiatives Internet2 NSF Middleware Initiative.

An Integrated Framework for Identity and Access Management (IAM) RL”Bob” Morgan, U Wash., MACE Keith Hazelton, U Wisc., MACE Internet2 Spring Member Meeting.

Using Signet and Grouper for Access Management Using Signet and Grouper for Access Management Tom Barton, University of Chicago Lynn McRae, Stanford University.

FEDERATIONS Clair Goldsmith, Ph.D., Associate Vice Chancellor and CIO September 27,

Collaborative Platforms. Collaborations and Virtual Organizations IdM is a critical dimension of collaboration, crossing many applications.

Identity Services Technical Briefing Tuesday, November 5, 2013 Nicholas Roy – Technical Manager 11/5/13Identity Services Technical Briefing1.

Directory Workshop Parallel Sessions Rob Banz, Univ. of Maryland, Baltimore County Tom Barton, University of Memphis Keith Hazelton, University of Wisconsin,

Shibboleth: An Introduction

3 Nov 2003 A. Vandenberg © Second NMI Integration Testbed Workshop on Experiences in Middleware Deployment, Anaheim, CA 1 NMI R3 Enterprise Directory Components.

GridShib: Campus/Grid RBAC Integration Penn State Grid Computing Workshop August 5th, 2005 Von Welch

Grouper Tom Barton University of Chicago. I2MM Spring Outline  Grouper’s place in the world  Some Grouper guts  Deployment scenarios.

Tools for Grid/Campus Integration: GridShib and MyProxy Internet2 Advanced Camp July 1, 2005 Von Welch

Internet2 and Cyberinfrastructure Russ Hobby Program Manager,

More Allergic Reactions Some Potential Next Steps Tom Barton University of Chicago.

Welcome to Base CAMP: Enterprise Directory Deployment Ken Klingenstein, Director, Internet2 Middleware Initiative Copyright Ken Klingenstein This.

University of Washington Collaboration: Identity and Access Management Lori Stevens University of Washington October 2007.

~60 staff 1.Collaborators around the world 2.Supports communities of collaborators external to Internet2 3.Community uses wiki, mailing lists, instant.

Grouper: A Toolkit for Managing Groups Tom Barton blair christensen University of Chicago.

Campuses New to Shibboleth: WebSSO Barry Johnson

Moving Forward in Stages Tom Barton, University of Chicago.

2-Oct-0101 October 2001 Directories as Middleware Keith Hazelton, Senior IT Architect University of Wisconsin-Madison Keith Hazelton, Senior IT Architect.

Internet2 Spring Meeting, Washington DC April NMI R2 Directory Services Components Overview Art Vandenberg Director, Advanced Campus Services Information.

Welcome to CAMP Directory Workshop Ken Klingenstein, Internet2 and University of Colorado-Boulder.

WSO2 Identity Server 4.0 Fall WSO2 Carbon Enterprise Middleware Platform 2.

Active Directory Domain Services (AD DS). Identity and Access (IDA) – An IDA infrastructure should: Store information about users, groups, computers and.

Leveraging Campus Authentication to Access the TeraGrid Scott Lathrop, Argonne National Lab Tom Barton, U Chicago.

OpenRegistry Initiative

Introducing Access Management

I2/NMI Update: Signet, Grouper, & GridShib

Identity and Access Management Services

ESA Single Sign On (SSO) and Federated Identity Management

Moving Beyond Implementation: Authorization

Grouper: A Toolkit for Managing Groups

PDI: Intro to Grouper Jeff Ruch Jeff Ruch ACNS Middleware

NSF Middleware Initiative: GridShib

Presentation transcript:

Current Middleware Picture Tom Barton University of Chicago Tom Barton University of Chicago

MACE: Objective & Modus Operandi Promote deployment of common middleware infrastructure across higher ed Practices, standards, models, tools, documentation to facilitate campus design & implementation Community-based, community-driven Early adopters, working groups Liaison, collaboration with other middleware communities Demonstrate viable models to vendor community

Current activities span … … typical dimensions of middleware for management of security Directories, identifiers, schema Authentication Authorization Messaging Diagnostics Operational practices but …

… take account of realities that are particularly higher ed Students Courses Multiple affiliations Multiple authorities and authority structures Self-identified activities Loosely affiliated populations Activities that span many organizations

Selected Harvest Recent releases eduPerson (200604) Enterprise Authentication Implementation Roadmap Higher Education Person Survey Use Cases: AAMC Identifier in Identity Management Systems Shibboleth 1.3d Signet 1.0 Grouper 0.9 Nexus pre-release 3 And a few integrative moments

Identity & Access Management: Functional Vocabulary VerbObjects ReflectData of interest from systems of record into registry, directory JoinIdentity information across systems ManageCredentials, group memberships, affiliations, privileges, services, policies Provide IAM info via - relay thru run-time request/response - provisioning into App/Service stores Authenticate (AuthN)Claimed identities Authorize (AuthZ)Access or denial of access LogUsage for audit

Connecting Sources of Authority

LDAP Attribute Management & Delivery: Affiliation, Privilege, & Privacy uid: jdoe eduPersonAffiliation: … isMemberOf: … eduCourseMember: … eduPersonEntitlement: … SIS HR Distributed Authorities/ Self Loaders Person Registry Group Registry Grouper Privilege Registry Signet Core Business Systems Shibboleth/ GridShib Attribute Authority Attribute Release Policies ShARPe Subject API Nexus

Finishing What’s On Our Plate Shibboleth 2.X & openSAML 2 Delegation, standards-based webSSO Enhanced management (AU partnership) Signet 1.X & Grouper 1.X Signet API, UI customization, XACML Group math Common rules engine, final Subject API

Finishing What’s On Our Plate Documentation Integrated story of when & how to deploy tools Concrete scenarios harvested from early adoption Toolset integration Harmonious design: configuration, internationalization, installation, site integration, composability

Tour of related track sessions Tuesday Federations – 1:15 EDDY – 3:00 FWNA – 4:30 VO Management – 4:30 Wednesday Preparing for Shibboleth – 8:45 Roles & Privileges – 1:15 PKI & USHER – 1:15 Inter-campus resource sharing – 3:00 Accessibility – 4:15 Managing Middleware – 4:15