1. Federations 101 John Krienke Internet2 Fall 2006 Internet2 Member Meeting

2. www.incommonfederation.org Federations 101 Introduction to Federations InCommon Federation Texas System Federation: Paul Caskey U California System Federation: David Walker UK Federation: Ian Young

3. www.incommonfederation.org What is a Federation? [def: a collaboration among otherwise independent entities where each agrees to relinquish some degree of autonomy to a governing body in order to achieve a common goal.] Examples

4. www.incommonfederation.org Identity Federation, IdM Fed, Access Control Federation… Providers of identity collaborating with providers of protected resources Goals: Protect privacy, intellectual property Ease of Use Repeatable, scalable arrangements

5. www.incommonfederation.org Identity / Access Control Federation: Why? Increasing Number Outsourced Services for Students, Faculty, Staff, Alumni, … More research consortia, more collaborations Access management complexities for resource and tool providers End-user experience, reliable and efficient to run infrastructure Federal and State laws & regulations (e. g., FERPA, HIPAA, Gramm-Leach-Bliley Act)

6. www.incommonfederation.org Identity / Access Control Federation: For what? Course materials Financial management Online instrumentation Grid-based resources Music, Travel, Software Government resources Protection of Identity

7. www.incommonfederation.org What does an Identity Federation do? The Federation: Defines policy, rules and requirements for participation Defines common vocabulary for identity attributes Operates common services required for interoperability Helps resolve problems and disputes May assess participants and/or enforce rules

8. www.incommonfederation.org All Federations are Not Alike Homogeneous Heterogeneous Subordinate Independent Vanilla Rocky Road eAuthInCommon

9. www.incommonfederation.org InCommon Created to support Higher Education and its research and business partners Federation operator is InCommon LLC operated by Internet2 Builds on existing campus identity management and single sign-on systems Makes use of open industry standards (SAML), open source federating software (Shibboleth), and common attributes in eduPerson Operates central services to facilitate multi-lateral trust: vetting Orgs, I&A of trusted officers, issuing PKI certificates, validating and signing Org metadata

10. www.incommonfederation.org Prerequisites Official University Directory Deploying a single, unique electronic identifier Web Single Sign On (SSO) Middleware: Implementing Technology Identifier Common language (identity attributes) IT framework with focus on security and privacy policies Federating software (Shibboleth) Sign Legal Agreement, pay fee Post your Practices

11. www.incommonfederation.org Higher Education (29) Case Western Reserve University Clemson University Cornell University Dartmouth Duke University Georgetown University Miami University New York University Ohio University Penn State Stanford University Stony Brook University SUNY Buffalo The Ohio State University The University of Chicago University of Alabama at Birmingham University of California, Irvine University of California, Los Angeles University of California, Merced University of California, Office of the President University of California, Riverside University of California, San Diego University of Maryland University of Maryland Baltimore County University of Maryland, Baltimore University of Rochester University of Southern California University of Virginia University of Washington Sponsored Partners (13) Cdigix EBSCO Publishing Elsevier ScienceDirect Houston Academy of Medicine - Texas Medical Center Library Internet2 Napster, LLC OCLC OhioLink - The Ohio Library & Information Network ProtectNetwork Symplicity Corporation Thomson Learning, Inc. Turnitin WebAssign

12. www.incommonfederation.org InCommon … Of Benefit “To meet the increasing campus demand for using external applications and online resources, we developed and implemented solutions that efficiently use our existing information infrastructures securely and safely in such a way that we maintain control over the release of personal information for people at Penn State. InCommon is a vitally important part of this infrastructure and helps put us in a position to provide a richer, easier to use, safer online experience for Penn State students, faculty, and staff.” -Kevin Morooney, vice provost, Penn State University Leverage your investments and your “next times”