1. CAMP-Shib, Broomfield CO, 30-Jun-041 Exploring some Shibbolized portals models… John Paschoud PERSEUS Project, LSE Library

2. CAMP-Shib, Broomfield CO, 30-Jun-042 [What it says on the box] This session will cover two frequently asked Shibboleth software-related questions: How can I use Shibboleth with my portal? What tools can I use to more easily manage my campus attribute release policies (ARP)? Attendees will leave with strategies for integrating portals and see the new graphical user interface under development for ARP management and provide feedback on it. ???????

3. CAMP-Shib, Broomfield CO, 30-Jun-043 PERSEUS Project Portal-Enabled Resources via Shibbolized End-User Security Extending Shibboleth to provide a test vehicle for policy-driven target authorisation decisions Shibboleth-based access-management to information resources via an institutional portal, using uPortal –SigNet? –PERMIS? Authority management for “short-term virtual organisations” –LSE Alumni Special Interest Groups

4. CAMP-Shib, Broomfield CO, 30-Jun-044 PERSEUS Project Follows-on from JISC SECURe Project at LSE JISC funding: £250K ($450K) over 2 years –Starting, errr, tomorrow Part of JISC Core Middleware:Technology Development Programme –…fitting within JISC Common Information Environment Using LSE as a testbed –Users (‘only’ about 10K directory identities) –Infrastructure –Resource licenses Producing: –Documented, scaleable campus models –Contribution to OSS developments of uPortal and SigNet

5. CAMP-Shib, Broomfield CO, 30-Jun-045 Powell, A, July 2003 (from UKOLN website) JISC Common Information Environment

6. CAMP-Shib, Broomfield CO, 30-Jun-046 [LSE for You portal] LSE administrative portal for staff & students…

7. CAMP-Shib, Broomfield CO, 30-Jun-047 Portal CMS content CLR Organisational Domain Unicorn library data CLR CLR = Collection-Level Registry SITS student data CMS content CMS = Content Management System Organisational Domain CLR Organisational Domain EDMS committee docs Jstor E-journals Supported std protocols; Custom proprietary interfaces Shibboleth YaleCAS LSE MIKE architecture

8. CAMP-Shib, Broomfield CO, 30-Jun-048 [LSE MIKE: Study view] LSE MIE: end-user ‘Study’ view

9. CAMP-Shib, Broomfield CO, 30-Jun-049 [LSE MIKE: Life view] LSE MIE: end-user ‘Life’ view

10. CAMP-Shib, Broomfield CO, 30-Jun-0410 portal CMS content CLR (eg) Organisational Domain Voyager library data CLR = Collection-Level Registry CMS = Content Management System (generalised, typical) Organisational Domain (eg)Jstor e-journals Shib AA -------------- (+ authority manager) YaleCAS (web ISO) Extensible n-tiered Shibbolized portal architecture CMS (external resources) LDAP enterprise directory SOSO STST = Shib Origin = Shib Target STST SITS student data STST SOSO SOSO STST SOSO HR staff data content STST STST STST STST CLR (eg) CMS STST content CMS STST content

11. CAMP-Shib, Broomfield CO, 30-Jun-0411 Portal interop models Bi-lateral short-term courses –LSE-Columbia Anthropology teaching project Regional resource-access deals –InforM25 London libraries National content licenses –EDINA, MIMAS data services Trans-national consortia –NEREUS portal for European Economics Research

12. CAMP-Shib, Broomfield CO, 30-Jun-0412 Portal interop models Regional inter-library portal: InforM25 Subject-specialized research portal: NEREUS Shib-enabled resource non-Shib resource Campus ‘access-to- everything’ portal: LSE MIKE Shib-enabled proxy UK DSP resources Columbia Anthropology resources

13. CAMP-Shib, Broomfield CO, 30-Jun-0413 Alumni groups as Virtual Organizations 2,500/year registered with LSE Library 4,000 alumni email accounts Special interest groups –(e.g.) LSE Lawyers Group –(e.g.) American Friends of LSE –Self-administering –Semi-autonomous –Loose contractual relationships –…but politically highly significant / powerful

14. CAMP-Shib, Broomfield CO, 30-Jun-0414 Implications for Federation models How do we manage many (conflicting?) Federation policies? –Bi-lateral –National –Trans-national How do we present users with a (single?) manageable ARP UI? How (do?) we map across different namespaces / vocabularies? …for: –Roles? –Entitlements?

15. CAMP-Shib, Broomfield CO, 30-Jun-0415 InforM25 ‘Visit a library’ (Access Eligibility Tool) Who can reference/borrow/order What? - at a library other than their own university? 150+ academic library sites 52 institutions hosting users 5 different consortial access schemes –SCONUL(x2), M25, UoL, UKLibs+ …plus numerous ad-hoc agreements between 2 or more libraries …and that’s just in London! An example of AuthoriZation, uncluttered by AutheNtication, for print resources in ‘traditional’ libraries Illustrates some of the problems we need to solve, to model the complexity of existing real-world ‘federations’

16. CAMP-Shib, Broomfield CO, 30-Jun-0416 InforM25 Val datamodel LSE u/g f/t students LSE M25 Scheme Joanna Brown belongs-to SOAS Library LSE u/g f/t students borrow grants-right-to to Kings Library M25 Scheme reference grants-right-to to

17. CAMP-Shib, Broomfield CO, 30-Jun-0417 InforM25 ‘Visit a library’ Demo example: Postgraduate, Researcher, full-time …affiliated to LSE …visiting Royal Holloway College http://www.m25lib.ac.uk/AET/

18. CAMP-Shib, Broomfield CO, 30-Jun-0418 What is shibboleth? (Biblical) A word which was made the criterion by which to distinguish the Ephraimites from the Gileadites. The Ephraimites, not being able to pronounce “sh”, called the word sibboleth. See --Judges xii. Hence, the criterion, test, or watchword of a party; a party cry or pet phrase. Webster's Revised Unabridged Dictionary (1913) [Judges, ch12, v5-6 (New American Standard)] The Gileadites captured the fords of the Jordan opposite Ephraim. And it happened when {any of} the fugitives of Ephraim said, "Let me cross over," the men of Gilead would say to him, "Are you an Ephraimite?" If he said, "No," then they would say to him, "Say now, 'Shibboleth.' " But he said, "Sibboleth," for he could not pronounce it correctly. Then they seized him and slew him at the fords of the Jordan. Thus there fell at that time 42,000 of Ephraim.

19. CAMP-Shib, Broomfield CO, 30-Jun-0419 What are shibboleths? (Political) The greatest needs of the Collectivist movement in England appear to me: The diffusion of economic and political knowledge of a real kind - as opposed to Collectivist shibboleths, and the cant and claptrap of political campaigning. [Sidney Webb: memorandum to LSE Trustees meeting on 8th Feb 1894]

20. CAMP-Shib, Broomfield CO, 30-Jun-0420 [Further information] SECURe: www.angel.ac.uk/SECURewww.angel.ac.uk/SECURe UKeduPerson scoping study: www.angel.ac.uk/UKeduPersonwww.angel.ac.uk/UKeduPerson JISC Middleware and Shared Services Studies: www.jisc.ac.uk/index.cfm?name=prog_middss_studies www.jisc.ac.uk/index.cfm?name=prog_middss_studies InforM25 ‘Visit a library’: www.m25lib.ac.uk/AET/www.m25lib.ac.uk/AET/ LSE: www.lse.ac.ukwww.lse.ac.uk JISC Common Information Environment: www.ukoln.ac.uk/distributed-systems/jisc-ie/arch/ www.ukoln.ac.uk/distributed-systems/jisc-ie/arch/ JISC Core Middleware Programmes: www.jisc.ac.uk/index.cfm?name=programme_middleware www.jisc.ac.uk/index.cfm?name=programme_middleware j.paschoud@lse.ac.uk