Umbrella Update Björn Abt

Contents „Umbrella Update“ presentation Part 1: Identity Provider Part 2: Service Provider

Identity Provider

Master-Master Replication Master-Master Replication of LDAP user information First tests with ILL, further to come with DESY This is the only level in the Umbrella IdP stack which needs synchronisation

Shibboleth IdP Independend Shibboleth IdP installations Needs a ServletContainer (e.g. Apache Tomcat) to run Only separated by Geo DNS

Umbrella WebApp Independend Umbrella WebApp installations Needs a ServletContainer (e.g. Apache Tomcat) to run Only separated by Geo DNS

Geo DNS Central Geo DNS provider Best Solution still to be evaluated (e.g. http://www.geoscaling.com/competitors.html) Distributes requests to the Umbrella by IP address of a client

Service Provider

SSO Tool To be done at facility: Install ServiceProvider software Configure to run with Umbrella Implement AccountLinking Pattern Ready for Internal Tests

SSO Operational To be done at facility: Make sure that internal tests where successful Wait for organized friendly user test

AddressUpdater Tool To be done at facility: Have SSO Tool installed Install AddressUpdater software Configure attribute matching for your local user store Change WUO software Ready for internal tests

Address Updater Operational To be done at facility: Make sure that internal tests where successful Wait for organized friendly user test

Affiliation DB Tool To be done at facility: Implement procedures to connect local Affiliation DB with central More details in separate presentation Ready for internal tests

Affiliation DB Operational To be done at facility: Make sure that internal tests where successful Implement adjustments Wait for organized friendly user test

How to proceed IdP Setup Additional IdP Setup Facility A: Internal Tests Facility B: Internal Tests Facility C: Internal Tests Initial Facilities: Friendly User Tests time January 2013 Somewhere in 2013

Thank you for your attention!