1. Australian Access Federation and other Middleware Initiatives Presented at TF-EMC2, Prague 4 Sep 2007 Patty McMillan, The University of Queensland

2. 2 Copyright © 2007 AusCERTContent Context and drivers Pre-federation projects AAF current status and issues –Operation and governance –Attributes –Communications and outreach AAF roadmap Other middleware initiatives in Australia

3. 3 Copyright © 2007 AusCERT Australian environment 38 publicly funded universities CAUDIT: Very strong coordination among Aus/NZ CIOs for higher ed and research Government policy encouraging more: –Collaboration and shared infrastructure –Diversification and specialisation –Global engagement –Research quality metrics –Operational efficiency

4. 4 Copyright © 2007 AusCERTNCRIS NCRIS = National Collaborative Research Infrastructure Strategy AUD 550M over 5 years for shared research infrastructure –physical facilities, instruments, technology Includes AUD 75M over 5 years for collaboration technology infrastructure: access management, data management, middleware, collaboration tools Australian Access Federation (AAF) seen as critical piece in enabling shared research infrastructure and research collaboration

5. 5 Copyright © 2007 AusCERT Pre-federation projects MAMS Project –Runs testbed Shibboleth federation –Contributes tools such as ShARPE: Shibboleth Attribute Release Policy Editor CAUDIT PKI Pilot Project –Investigated PKI architecture model for HE & Research –Deployed pilot infrastructure eSecurity Framework Project –Brought Shibboleth and PKI components together into a common trust infrastructure for the higher education and research sector.

6. 6 Copyright © 2007 AusCERT AAF implementation project AUD 4.8 M funded by Department of Education, Science, and Training Introduce production federation early 2008 building on work done by previous projects University of Queensland leads project, partnered by AusCERT and Macquarie University (MAMS) Steering Committee with representation across sector Transition from implementation project to ongoing production federation service in 2008

7. 7 Copyright © 2007 AusCERT AAF current status Draft policies: https://wiki.esecurity.edu.au/display/esecurity/Draft+Policy+Frame work MAMS Testbed Fed now has Level 2 with 21 IdPs, 21 SPs as pre-production to be transitioned to AAF Popular hands-on Shibboleth and PKI workshops Working groups for attributes, grid, and LoA Very good awareness among CIOs and nearly all report undertaking major identity management projects Less awareness among other parts of the community

8. 8 Copyright © 2007 AusCERT AAF operation and governance

9. 9 Copyright © 2007 AusCERTAttributes! Working group to recommend schemas and attributes for AAF. Have canvassed community on core attributes from –eduPerson, person, organizationalPerson, inetOrgPerson –Recommendations at: http://www.aaf.edu.au/casp Recent workshop looked at further attribute needs –SCHAC: including several as recommended attributes –auEduPerson: deprecating several attributes from 2002 schema; creating a few more – for IDs and LoAs –DISCLAIMER: Still to be canvassed with community and approved by AAF Steering Committee

10. 10 Copyright © 2007 AusCERT AAF communications and outreach Draft communications plan to reach: –DVCs-Research and other senior management –CIOs –Librarians –Technical staff –e-Research support providers –Service providers –HR and student admin staff –End-users Developing communication and outreach roles

11. 11 Copyright © 2007 AusCERT AAF roadmap highlights PKI Pre-Release Activities –Implementing architecture and finalising certificate profiles Release 1 –Core Infrastructure deployment Release 2 –WebTrust audit –Vendors to process the AusCERT Root Certificate to be included in Browsers and release update –Additional Services Hosted CA/RA Virtual Home Organisation (VHO)

12. 12 Copyright © 2007 AusCERT AAF roadmap highlights Shibboleth Pre-release activities –MAMS testbed federations (Levels 1 and 2) Release 1 –Federation Manager & Federation Website –WAYF agent –Shared Services (Federated Directory Search) –Integration with AusCERT PKI –MAMS Shib-based “IAMSuite” for VOs and collaboration Wiki eg. Confluence, Action tracking eg. JIRA, Repository eg. Fedora/DSpace Release 2 –Integration of IAMSuite and VOMS –Shibboleth Identity Provider (IdP) Member Audits Information provided by MAMS

13. 13 Copyright © 2007 AusCERT Diagram developed by MAMS AAF roadmap highlights

14. 14 Copyright © 2007 AusCERT Other middleware initiatives MAPS Project: Middleware Action Plan & Strategy –Report and action plan: http://www.middleware.edu.au/roadmap –Developing reference architectures for institutions on: Identity and access management Data management VO management and collaboration tools Real-time communications Secure campus network design Grid services

15. 15 Copyright © 2007 AusCERT Other middleware initiatives ICI: Interoperability and Collaboration Infrastructure –AUD 20 M funded as part of NCRIS –Focus will be on Grid interoperability –Joint venture of service providers led by VPAC (Victorian Partnership for Advanced Computing)

16. 16 Copyright © 2007 AusCERT Thank you!