1. WebISO, Single Sign-On & Authorization General Overview Shelley Henderson Project Manager, Grid Software USC Information Services shelley@usc.edu Copyright Shelley Henderson 2003. This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish requires written permission from the author.

2. WebISO, Single Sign-On & Authorization PubCookieShibboleth

3. Overview of PubCookie 2 2 2 2 2 2 2 2 2 2 2 2

4. WebISO, Single Sign-On & Authorization UFL PubCookie Case Study

5. WebISO, Single Sign-On & Authorization USC PubCookie Case Study

9. November 2003NMI Testbed Workshop - AuthN/AuthZ Overview 9

10. November 2003NMI Testbed Workshop - AuthN/AuthZ Overview 10

11. November 2003NMI Testbed Workshop - AuthN/AuthZ Overview 11

12. WebISO, Single Sign-On & Authorization Lunch Break!

13. WebISO, Single Sign-On & Authorization Overview of Shibboleth

14. November 2003NMI Testbed Workshop - AuthN/AuthZ Overview 14 Shibboleth Solution  Access without proxy  Leverage local enterprise authentication  Access based on role attributes  Enables access from anywhere on web  User can dynamically review/limit release of identifying information (privacy)  Reduced logins

15. November 2003NMI Testbed Workshop - AuthN/AuthZ Overview 15 Architecture components  Sun Solaris or Red Hat Linux  Apache, Tomcat, J2SE  Origin site (enterprise) requirements  Handle Server  single signon (SSO) or web initial signon (WebISO)  Attribute Authority  repository (LDAP, mySQL)  Target site requirements  SHIRE  SHAR  WAYF  Resource Manager

16. WebISO, Single Sign-On & Authorization GSU Shibboleth Case Study

17. WebISO, Single Sign-On & Authorization USC Shibboleth Case Study

18. USC Shibboleth SCEC http://epicenter.usc.edu/cmeportal/index.html http://epicenter.usc.edu/cmeportal/docs/SCEC Grid-TechnicalReport.pdf http://epicenter.usc.edu/cmeportal/docs/SCEC Grid-TechnicalReport.pdf

19. USC Shibboleth Scholar’s Portal http://www.arl.org/access/scholarsportal/

20. http://www.arl.org/access/scholarsportal/

21. http://www.arl.org/access/scholarsportal/ http://www.arl.org/newsltr/211/portal.html

22. USC Shibboleth Scholar’s Portal http://www.arl.org/access/scholarsportal/ http://www.arl.org/newsltr/211/portal.html

23. USC Shibboleth Blackboard http://www.blackboard.com/

24. USC Shibboleth Elsevier http://www.elsevier.com

25. WebISO, Single Sign-On & Authorization http://www.pubcookie.org/ http://shibboleth.internet2.edu/

26. WebISO, Single Sign-On & Authorization Q A &