New York regional information centers Jump Start! xPress roster via sif 2 New York regional information centers RIC One project Jason Wrage © Access 4 Learning (A4L) Community

Standard Utilization © Access 4 Learning (A4L) Community

© Access 4 Learning (A4L) Community

Concerns over privacy and security lead to the demise of inBloom The Challenge “Every new beginning comes from some other beginning’s end.” Seneca (or Semisonic?) Concerns over privacy and security lead to the demise of inBloom © Access 4 Learning (A4L) Community

The 700+ districts in New York state still needed solutions for data interoperability & SSO… © Access 4 Learning (A4L) Community

Reliably and consistently obtaining data from (6) different student systems © Access 4 Learning (A4L) Community

Maximizing adoption potential to provide students and teachers with lots of choices © Access 4 Learning (A4L) Community

The Solution Enter: API and LOGIN Entrust the regional service centers already providing data and networking services to districts with building a better mousetrap Business requirements related to privacy and security largely drove the defining architectural characteristics Emphasis is on local & regional control Regional data hubs Federated single sign on © Access 4 Learning (A4L) Community

The Solution What’s the best way to securely provide rostering data to educational apps? A modern, open, RESTful web service API Building on SIF 3, we developed xPress Roster Our implementation is known as RIC One API What’s the best way to provide Single Sign On, while maintaining local control and security best practices? Federated identity Our implementation is known as RIC One LOGIN © Access 4 Learning (A4L) Community

“Better together” but “independently adoptable” The Solution RIC One API ingests data from SISs using SIF2 offers roster data to client apps via the xPress Roster API RIC One LOGIN connects to district, regional or cloud directories (IdPs) via LDAPS Offers SSO services to service providers using SAML 2, WS-Federation and OpenID Connect (future) “Better together” but “independently adoptable” © Access 4 Learning (A4L) Community

The Standards RIC One API Function Standard Description Data ingestion SIF 2 Near-universal support by source systems (SISs), reliability and real time were the main benefits to using SIF2 to get data. Data storage CEDS We created a “light” schema to support rostering based on CEDS DES. This enables us to be agnostic for ingestion and API output. API xPress Roster /SIF 3 We based xPress roster on both CEDS and SIF3. It is designed for simplicity and ease of use by developers of client apps. Code sets Since SIF 3 does not provide a standard set of codes, we decided that the option sets in CEDS were the best way to go. © Access 4 Learning (A4L) Community

The Standards RIC One LOGIN Function Standard Description Directory access LDAPS Near-universal support by source systems (SISs), reliability and real time were the main benefits to using SIF2 to get data. SSO SAML 2 The current de facto standard for enterprise, web-enabled SSO. WS-Federation An older standard required for Office 365 support. OpenID Connect Positioned to become the new standard of choice for SSO. Better support for mobile. © Access 4 Learning (A4L) Community

RIC One Integrated System Architecture Nuts & Bolts DPA (x12) Config Service Auth Service District SISs Other Data Sources District Directories Identity Federation Provisioning Auth-Time Client Client App/SP SAML Client API Client LOGIN Components API Components Central Services RIC One Integrated System Architecture © Access 4 Learning (A4L) Community

Nuts & Bolts These solutions are based almost exclusively on Open standards: xPress Roster SIF 3 SIF NA 2.x CEDS Open source: NSIP’s SIF 2 and SIF 3 frameworks ForgeRock’s identity platform Linux, Docker, MySQL/MariaDB, Node.JS, Loopback © Access 4 Learning (A4L) Community

Meeting Stakeholder Needs Districts Enabling streamlined, equitable access to apps Heightened awareness of privacy and security Eliminates the burden of manual processes RICs Collaboration across regions Reduction in labor required to build and maintain traditional extract methods across multiple SISs Vendors A single API for roster data Easy to implement (we even provide client libraries) © Access 4 Learning (A4L) Community

Related Sessions Open Source, later today xPress Next, Wednesday xPress Attendance, Thursday Thank you! For more information www.ricone.org jason.wrage@ovrtr.com © Access 4 Learning (A4L) Community