1. Your Key to Privacy, Security, and Access to Services
Andrew Baldwin, MS, IT Sr. Manager,
Johns Hopkins University
Etan Weintraub, Sr. Software Engineer,
January 12, 2011
2011 Mid-Atlantic Conference

2. Agenda Problem Web SSO @ Hopkins Timeline Benefits Challenges
Keys to Success
2011 Mid-Atlantic Conference

3. Problem Multiple systems creating and storing user credentials
Confusion for customers (What ID/Password needed?)
External application access compounds issue
Hundreds of internal applications
2011 Mid-Atlantic Conference

4. WebSSO @ Hopkins SiteMinder – Default internal Web SSO
BlueJay - Internal Federation
InCommon – External Federation
2011 Mid-Atlantic Conference

5. CA SiteMinder Hundreds of applications
Primarily for internal applications
Provides Web Single Sign On
Centralized Credential Collection
2011 Mid-Atlantic Conference

6. Blue Jay Internal Federation
Internally Hosted
Sympa distribution list application
EZProxy
InfoSuite – Welch Medical Library Portal
Multiple internally developed applications
2011 Mid-Atlantic Conference

7. Blue Jay Internal Federation
Externally Hosted
Benefits enrollment (Mercer – SAML consumer)
Online pay statements (ADP – SAML consumer)
Sakai
Learnshare
2011 Mid-Atlantic Conference

8. InCommon Applications
Project Muse
Internet 2 request to participate in InCommon
Met with Project Muse team
InCommon setup
CRMS
Medical Research application
Local Hospitals
NIH
2011 Mid-Atlantic Conference

9. Timeline 2000 - 2005 – Centralized Directory 2005 – CA SiteMinder
Camp Shibboleth
Blue Jay Internal Federation
InCommon Participant
Project Muse
CRMS
2011 Mid-Atlantic Conference

10. Benefits Reduce Sign On Control attribute release
InCommon recommended attribute release
InCommon setup – do it once
Credentials centrally collected
2011 Mid-Atlantic Conference

11. Challenges Identity provider setup to centralized directory
Technical Understanding
Costs
Legal
Customers understanding WAYF/Discovery Service
2011 Mid-Atlantic Conference

12. JHU Logon Page
2011 Mid-Atlantic Conference

13. Discovery Service
2011 Mid-Atlantic Conference

14. Keys to Success Management support Application owner support
Customer acceptance
Technical team
Community support
2011 Mid-Atlantic Conference

15. What is needed? Centralized Directory Shibboleth Software
Participate InCommon Federation
Servers
Identity Provider
Train technical staff
2011 Mid-Atlantic Conference

16. Questions?
2011 Mid-Atlantic Conference

17. Contact Information
Andy Baldwin
(410)
Etan Weintraub
(410)
2011 Mid-Atlantic Conference

18. Useful Sites http://Shibboleth.internet2.edu
2011 Mid-Atlantic Conference