Welcome to CAMP Directory Workshop Ken Klingenstein, Internet2 and University of Colorado-Boulder

CAMP Directory Workshop Feb 3-6, 2004 Topics  Requisite video  A Word from the Sponsors  Overview of Enterprise Directories  Outline of CAMP Agenda

CAMP Directory Workshop Feb 3-6, 2004 A Word from the Sponsors  National Science Foundation Middleware Initiative  Enterprise and Desktop Integration Technologies Consortium (NMI-EDIT) –Internet2, EDUCAUSE, and SURA –Project Goals  Create a common, persistent and robust core middleware infrastructure for the R&E community  Provide tools and services in support of inter-institutional and inter-realm collaborations

CAMP Directory Workshop Feb 3-6, 2004 MACE (Middleware Architecture Committee for Education)  Purpose - to provide advice, create experiments, foster standards, etc. on key technical issues for core middleware within higher education  Membership - Bob Morgan (UW) Chair, Tom Barton (Chicago), Scott Cantor (Ohio State), Steven Carmody (Brown), Michael Gettes (Duke), Keith Hazelton (Wisconsin), Paul Hill (MIT), Jim Jokl (Virginia), Mark Poepping (CMU), Bruce Vincent (Stanford), David Wasley (California), Von Welch (Grid)  European members - Brian Gilmore (Edinburgh), Ton Verschuren (Netherlands), Diego Lopez (Spain)  Creates working groups in major areas, including directories, interrealm access control, PKI, video, P2P, etc.  Works via conference calls, s, occasional serendipitous in- person meetings...

CAMP Directory Workshop Feb 3-6, 2004 Identity Management System  Suite of campus-wide security, access, and information services –Integrates data sources and manages information about people and their contact locations –Establishes electronic identity of users –Issues identity credentials –Uses administrative data and management tools to assign affiliation attributes –…and gives permission to use services based on those attributes

CAMP Directory Workshop Feb 3-6, 2004 Middleware Initiative Axioms  Work the core areas  Focus on support for collaboration  Use federated administration as the lever; have the enterprise broker most services (authentication, authorization, resource discovery, etc.) in inter-realm interactions  Develop a consistent directory infrastructure within R&E  Provide security while not degrading privacy.  Foster interrealm trust fabrics: federations and virtual organizations  Leverage campus expertise and build rough consensus  Support for heterogeneity and open standards  Influence the marketplace; develop where necessary

CAMP Directory Workshop Feb 3-6, 2004 Enterprise Directory Services Enterprise Directory Services – where electronic identifiers are reconciled and institutional identity is established and maintained for all people of interest –Very quick lookup function –Machine address, voice mail box, box location, address, campus identifiers

CAMP Directory Workshop Feb 3-6, 2004 A Map of Middleware Land

CAMP Directory Workshop Feb 3-6, 2004 Core Middleware Scope  Identity and Identifiers – namespaces, identifier crosswalks, real world levels of assurance, etc.  Authentication – campus technologies and policies, interrealm interoperability via PKI, Kerberos, etc.  Directories – enterprise directory services architectures and tools, standard objectclasses, interrealm and registry services  Authorization – permissions and access controls, delegation, privacy management, etc.  Integration Activities – open management tools, use of virtual, federated and hierarchical organizations, enabling common applications with core middleware

CAMP Directory Workshop Feb 3-6, 2004 Interrealm and Federation  Given the strong collaborations within the academic community, there is an urgent need to create inter-realm tools, so  Build consistent campus middleware infrastructure deployments, with outward facing objectclasses, service points, etc. and then  Federate those enterprise deployments, using the outward facing campus infrastructure, with interrealm attribute transports, trust services, etc. and then  Leverage that federation to enable a variety of applications from network authentication to instant messaging, from video to web services, and then, going forward  Create tools and templates that support the management and collaboration of virtual organizations by building on the federated campus infrastructures.

CAMP Directory Workshop Feb 3-6, 2004 Federated administration OTOT OTOT TT A CM CM A VO T Campus 1 Campus 2 Federation

CAMP Directory Workshop Feb 3-6, 2004 Campus Core Middleware Architecture: (Origin perspective)

CAMP Directory Workshop Feb 3-6, 2004 The pieces fit together…  Campus infrastructure –Developing and encouraging the deployment of identity management components, tools, and support services  Inter-realm infrastructure –Leveraging the local organizational infrastructure to enable access to the broader community though  Building on campus identity management infrastructures  Extending them to contain standard schemas and data definitions  Enabling the exchange of access information in a private and secure way  Developing diagnostic tools to make complex middleware interactions easier to understand

CAMP Directory Workshop Feb 3-6, 2004 CAMP Agenda  Directory Implementation focused based on Directory RoadmapDirectory Roadmap  Four management and technical phases –Project Planning –Design –Data –Deployment  Sessions roughly correlate to these phases

CAMP Directory Workshop Feb 3-6, 2004 CAMP Agenda Outline  Wednesday –Project planning, Design, and Data Phases –Active Directory discussion session at lunch  Thursday –Deployment Phase –Life after Implementation: Governance –Free Consulting  Friday –What’s in the future  Authorization and groups management  Shibboleth

CAMP Directory Workshop Feb 3-6, 2004 CD Contents  Contents of the CD –Directory Roadmap –Getting Started Section  General readings and intro material –NMI-EDIT practices, architectures, tools, and software from our four releases –Campus Contributions from some of you in the audience and other generous folks  Thanks for the idea, Jack!  Is it useful? –Vote in the poll on Friday or send feedback to

CAMP Directory Workshop Feb 3-6, 2004 And Thanks to… All the speakers (and their institutions) for their support, knowledge, and enthusiasm and You for attending and participating!