Interfederation: From Demo to Eternity RL “Bob” Morgan, University of Washington and Internet2 Internet2 Member Meeting, Chicago December, 2006
RL “Bob” Morgan2 Topics What we're showing today What it took to get here Who made it possible Where we go from here
RL “Bob” Morgan3 Federated Access between Federations User sign-on from production campus signon services to production NSF FastLane application PSU, Stanford and UW are in InCommon Federation, serving US Higher Ed community NSF is in E-Authentication Federation, serving US Government agencies Campuses using Shibboleth, NSF using Sun Access Mgr, showing value of SAML standard
RL “Bob” Morgan4 How we got here Collaboration on interfederation concepts by E- Auth and InCommon Compliance/Certification of Shibboleth software Assessment of campus identity mgt by GSA to meet E-Auth defined Levels of Assurance Detailed policy/technical alignment by both sides Strong support of pilot by NSF and campuses
RL “Bob” Morgan5 Thank You to... Impresario: Peter Alterman (NIH) Leadership: George Strawn (NSF), Georgia Marsh (E-Auth PMO, GSA) Shibboleth team: Scott Cantor (OSU), Walter Hoehn (U Memphis), Steven Carmody (Brown) NSF deployers: Bill Altmire, David Lotts Campus deployers: Jim Fox (UW), Mark Miller (PSU), Scotty Logan (Stanford)
RL “Bob” Morgan6 Next Steps Finalize MoA for permanent arrangement between InCommon and E-Authentication Establish InCommon “Bronze” criteria in alignment with E-Auth Assurance Level 1 Audit/certify campus compliance with InC Bronze Initiate stable production federated access to FastLane, bring in PI community
RL “Bob” Morgan7 Next Phase Further collaboration between InCommon and E- Auth on next-generation technical standards (SAML 2.0, attribute exchange, etc.) Federated access to many more agency applications: Depts of Education, Interior, Agriculture, NIH, many others Many more campuses joining InCommon, setting up access to E-Auth applications
RL “Bob” Morgan8