live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Building a Consortium model for Identity Management Motivation Planning Implementation Jerry Smith Associated Colleges of Central Kansas June 13, 2012 ACCK and CampusEAI

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: An Introduction To ACCK The Associated Colleges of Central Kansas (ACCK) is a consortium of six private colleges located within 40 miles of McPherson, Kansas. Over 4,000 students are enrolled. They are served by faculty and staff of over 800.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Bethany College Lindsborg, KS Bethel College North Newton, KS Kansas Wesleyan Univ. Salina, KS McPherson College McPherson, KS Sterling College Sterling, KS Tabor College Hillsboro, KS ACCK Member Colleges

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: A Long History of Shared IT Services The Consortium has provided central IT services to the 6 colleges since the early 1970’s

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Motivations for Change ACCK Office Motivations The ACCK Colleges are using a variety of authentication and account provisioning methods to interface with the Jenzabar ERP. Some use internal authentication and other external Some let the ERP establish accounts, others establish accounts on campus and send to ACCK Each Campus uses a different naming convention The current approach requires a high degree of manual intervention and is prone to error.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Motivations for Change (Cont.) ACCK College Motivations Most of the account provisioning is a manual process. Students must wait too long for accounts to be issued and become active. Admissions and Alumni want accounts to be issued earlier and kept active for Alumni. It is easy for the student accounts to get out of sync between the campus systems and ERP These errors are hard to trouble-shoot

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: The Evolution of the Solution Discussions were started with CampusEAI in March of 2011 An initial proposal was developed and shared with the Campus IT Directors in April, 2011 The initial discussion center around a single, consortium-wide IDM approach. The conclusion was that a single IDM was a bit too ambitious, so a individual campus approach, but following the same model, was the selected approach

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: The Evolution of the Solution (cont.) Tabor College volunteered to be the Model College with ACCK office assisting and sharing some costs. It was determined that before an IDM approach could be identified, more discovery activity was required. TC and ACCK contracted with CampusEAI for an on-site discovery project.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: The Discovery Process CampusEAI spent three days on the Tabor Campus meeting with Tabor and ACCK staff. Goals were reviewed and a conceptual overview was developed. The Active Directory replication process was reviewed and a side project developed to assist Tabor College with improving their AD process.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: SOR=JENZABAR SYSTEM AT TABOR (CX) FacultyStaffStudents Microsoft Forefront Identity Management Active Directory Google Moodle Rooms Library System Account Provisioning

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: INTRENAL SYNC BETWEEN CX and JICS Microsoft Forefront Identity Management Active Directory Google Moodle Rooms Library System Password Management – Option 1 JICS CX End Users

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: The Project Plan Based on the information gained from the discovery, a project proposal and plan was developed by CampusEAI and signed by Tabor/ACCK. The project has four phases: Pre-Production – information gathering / verifying scope. Implementation – Building equipment and databases Testing and QA – includescreating a hosted test environment Production Release – migration and roll-out

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Current Status Currently in Phase 3 Attribute Mapping is just about finished About ready to start testing Dealing with some functionality issues Target is to have the IDM in production in July.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Observations and Lessons Learned This project stretched the skills and resources of our staff (especially the Executive Director). CampusEAI helped “fill in the holes” It is hard to “sell” IDM to non-technical Executive Staff. It is a foundational technology not much immediate functionality We included the Single Sign-On portal in the project to provide observable end-user benefit.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Conclusions CampusEAI has been a good choice for us, and their flexibility is much appreciated. IDM is difficult for small colleges whose staff are more generalist in skills. We look forward to the project completion, and then moving on to the other colleges. Our IDM system will provide a foundation for future activities such as traveling credentials and easier deployment of third party applications.

live. learn. work. play Superior Avenue Suite 310 Cleveland Ohio Tel: Fax: Contact Information Jerry Smith, Executive Director Associated Colleges of Central Kansas 210 South Main Street McPherson, Kansas Voice: (620) 241 – 5150 Fax: (620) Web: