Interfederation subgroup of InCommon Technical Advisory Committee (TAC) spaces.internet2.edu/display/incinterfed.

Slides:

Advertisements

Similar presentations

Innovation through participation eduGAIN federation operator training eduGAIN interfederation service /18 Valter Nordh, NORDUnet / GU 1.

Advertisements

Federated Identity Management for Researchers – A quick overview from GÉANT BoF TNC May 2014 Dublin.

TIER – before, now and after If you do not talk this will be a very long hour because we can only repeat the same stuff for so long… 1.

EduGAIN – Are we there yet? Lukas Hämmerle (ghost writer, Brook Schofield) FIM4R, Helsinki – 2 October 2013.

Europe Latin America Collaborative e ‑ Infrastructure for Research Activities A Model for Federated Services Brook Schofield, TERENA ● Sofia, Bulgaria.

TAC Interfederation Subgroup

The 4BF The Four Bridges Forum Higher Education Bridge Certificate Authority.

1 eAuthentication in Higher Education Tim Bornholtz Session #47.

Federated Identity, Levels of Assurance, and the InCommon Silver Certification Jim Green Identity Management Academic Technology Services © Michigan State.

Agenda Project beginnings and funding. Purpose of the federation. Federation members. Federation protocols. Special features in our federation. Pilot.

Federated Identity for Scientific Collaborations: Policy Issues Jim Basney 2 nd Workshop on Federated Identity Systems for Scientific.

NJVid New Jersey Video Portal 1 Grant partners. NJVid New Jersey Video Portal 2 NJTrust - New Jersey Identity Trust Federation NJViD Advisory Board Meeting.

InCommon Technical Advisory Committee (TAC) Community Update February 22,

SWITCHaai Team Federated Identity Management.

InCommon Forum Fall 2012 Internet2 Member Meeting Wednesday, October 3,

ESA EO Federated Identity Management Initiatives A. Baldi ESA: M. Leonardi RHEA:

To identity federation and beyond! Josh Howlett JANET(UK) HEAnet 2008.

Federated Identity Management in New Zealand Sat Mandri Service Manager TNC15 REFEDs Meeting, 14 th June 2015.

A case study of Shibboleth deployment within the U.T. System June 26, 2006 Paul Caskey University of Texas System Copyright Paul Caskey 2006 Not Your Father’s.

The InCommon Federation The U.S. Access and Identity Management Federation

1 The Partnership Challenge Higher education’s missions are realized in increasingly global, collaborative, online relationships –Higher educations’ digital.

IAMOhio: OARnet’s Trusted Identity Federation Internet2 Fall Member Meeting 2012 Philadelphia, PA Mark Beadles Program Manager, IAMOhio Federation

ADFS in the U.T. System U.S. Federations Call - May 18, 2011 Paul Caskey System-wide Information Services.

Federated Identity Management for HEP David Kelsey WLCG GDB 9 May 2012.

Federations 101: The U.T. System Identity Management Federation Internet2 Member Meeting Fall 2006 Paul Caskey.

Updates Licia Florio, TERENA REFEDS Meeting 5 Sept 2012.

Belnet Federation Belnet – Loriau Nicolas Brussels – 12 th of June 2014.

Shibboleth federations: A Publisher’s Perspective Ale de Vries Product Manager ScienceDirect Elsevier Terena EuroCAMP Malaga, October 18-19, 2006.

Kalmar Union, a Conferedation of Nordic Identity Federations TNC2009 Mikael Linden, CSC Andreas Solberg, UNINETT.

ELCIRA and eduGAIN: Practical aspects of interfederation for academic collaboration Brook Schofield, TERENA ● TICAL2013, Cartagena, Colombia ● 8 th July.

Social Identity Working Group Steve Carmody. Agenda Intro to Using Social Accounts Status and Recent News –Current UT Pilot –Current InCommon Pilot with.

COmanage and InCommon: Present and Future Activities and Interactions Heather Flanagan, COmanage Project Coordinator, Internet2.

Federations 101 John Krienke Internet2 Fall 2006 Internet2 Member Meeting.

Kalmar Union lessons: Findings in federation harmonisation REFEDS Mikael Linden, CSC.

Géant-TrustBroker project overview Slides assembled by the Géant-TrustBroker team at Leibniz Supercomputing Centre, Germany for a short presentation by.

Shibboleth Update Eleventh Federal & Higher Education PKI Coordination Meeting (Fed/Ed Thursday, June 16, 2005.

INTRODUCTION: THE FIRST TRY InCommon eduGAIN Policy and Community Working Group.

University of Washington Identity and Access Management IEEAF – RENU Network Design Workshop Seattle - 29 Nov 2007 Lori Stevens, Director, Distributed.

Authentication and Authorisation for Research and Collaboration Christos Kanellopoulos GRNET Proposed Pilots for Libraries and eGov.

The UK Access Management Federation John Chapman Project Adviser – Becta.

Federated Identity in Texas Paul Caskey The University of Texas System HEAnet National Conference Kilkenny, Ireland 13 November 2008.

Géant-TrustBroker Project Overview Daniela Pöhn 7 th FIM4R meeting Frascati, Italy April 24 th, 2014.

Federated Identity Management for HEP David Kelsey HEPiX, IHEP Beijing 18 Oct 2012.

Brown University Leveraging Social Identities Steve Carmody CSG, May 15, 2013.

Programme ›TERENA ›Overview of the middleware initiatives in the European Higher Education ›What is eduroam: the technology and how to set up eduroam ›eduroam-in-a-box:

Growth. Interfederation PKI is globally scalable Unfortunately, its not locally deployable… Federation is locally deployable Can it.

Networks ∙ Services ∙ People Thomas Bärecke Journée Fédération, Paris Collaboration européenne GÉANT SA5 03/07/2015 SA5 T5 team

Connect communicate collaborate Trust & Identity EC meets GÉANT 19 June 2014 Brussels Valter Nordh, NORDUnet Federation as a Service Task Leader Trust.

Networks ∙ Services ∙ People Nicole Harris UK federation meeting eduGAIN, REFEDS and the UK 23 June 2015 Project Development Officer GÉANT.

InCommon Federation: Federating Relationships. Topics Administration Library Research Student Services Personal and Collaborative Applications Federal.

Interfederation: From Demo to Eternity RL “Bob” Morgan, University of Washington and Internet2 Internet2 Member Meeting, Chicago December, 2006.

Trust and Identity Infrastructure Services Above the Network Ann Harding, SWITCH/GÉANT UbuntuNetConnect 2014.

Networks ∙ Services ∙ People Marina Adomeit FIM4R meeting Virtual Organisation Platform as a Service VOPaaS Nov 30, 2015, Austria Task Leader,

Federated Identity Fundamentals Ann Harding, SWITCH Cambridge July 2014.

INTRODUCTION TO IDENTITY FEDERATIONS Heather Flanagan, NSRC.

Networks ∙ Services ∙ People Andrea Biancini #TNC15, Porto, Portugal Implementing Grouper to federate user authorization Federated Authorization.

Open Collaboration Exchange Alexander Blanc, Niels van Dijk, Jocelyn Manderveld, Remco Poortinga - van Wijnen VAMP 2013, Espoo.

Networks ∙ Services ∙ People Licia Florio TNC, Lisbon Consuming identities across e- Infrastructures 16 June 2015 PDO GÈANT.

1 Name of Meeting Location Date - Change in Slide Master Authentication & Authorization Technologies for LSST Data Access Jim Basney

Networks ∙ Services ∙ People Marina Adomeit TNC16 Conference, Prague Towards a platform for supporting collaboration GÉANT VOPaaS

International Growth of Federations & eduGAIN

LIGO Identity and Access Management

Mechanisms of Interfederation

John O’Keefe Director of Academic Technology & Network Services

InCommon Steward Program: Community Review

Incident Response for Federated Identities

Discovery and Federated Identity

UK Federation 101 Ian A. Young EDINA, University of Edinburgh (and the UK Federation) Internet2 Fall Member Meeting, 7 Dec Shibboleth Development.

Community AAI with Check-In

Presentation transcript:

Interfederation subgroup of InCommon Technical Advisory Committee (TAC) spaces.internet2.edu/display/incinterfed

Mission Promote and pursue interfederation between the InCommon Federation and other SAML federations via a community-based process Both policy and technical aspects are in scope

Relationships refeds.org – int’l forum for interfederation discussions edugain.org – interfederation service other federations, including: – UK Access Management Federation (Ian Young) ukfederation.org.uk/content/Documents/InterfederationTrialFAQ – Canadian Access Federation (Chris Phillips) – University of Texas System Federation (Paul Caskey) – K-12 enabled by regional networks (Mark Scheible)

Deliverables (June 2013) Use Cases spaces.internet2.edu/x/EQAwAg Plans for InCommon and UK Interfederation spaces.internet2.edu/x/tIA_Ag Lessons Learned spaces.internet2.edu/x/QwBOAg Report to Technical Advisory Committee (TAC) Links at spaces.internet2.edu/display/incinterfed

Use Cases International collaborations – (LIGO, NIH, Internet2, TERENA, Shibboleth) Online university course with int’l enrollment University published journal with int’l subscriptions Campus federations University system federations K-12 Community colleges State agencies Federated wireless (eduroam)

Interop Across Federations Entity-to-entity metadata exchange – IdPs and SPs exchange metadata directly with each other. – Examples: 1) Google Apps and 2) LIGO SPs + KAGRA IdP in Japan Entity joining multiple federations – IdP or SP joins multiple federations to enable interoperability. – Example: LIGO (an InCommon member) also joining Italian Identity Federation (IDEM) Bilateral interfederation – Two federations enable interop across their combined membership. – Examples: UK with Edugate (Ireland) and (possibly) InCommon Multilateral interfederation – Multiple federations join a common technical infrastructure and/or policy framework. – Examples: eduGAIN and Kalmar Union Hierarchical federation – Examples: 1) U Texas System + InCommon and 2) Regionals (The Quilt) + InCommon

Successful Interfederation Pilot LIGO users at Cardiff University (UK) logged in to LIGO wiki (US/InCommon)! Thanks to Steven for metadata aggregate Ian for UK federation coordination Scott for LIGO SP configuration Rhys for Cardiff IdP configuration

Potential InCommon Next Steps Add PublicationInfo and RegistrationInfo to metadata – Helps with metadata aggregation across federations Support hierarchical federation – Automated import of external federation metadata Support bilateral federation – Build on pilot effort with UK federation Join eduGAIN – For multilateral federation Provide a production interfederation metadata aggregate – Stable source of external entity metadata Support additional entity tags in metadata – SP privacy policy, IdP discoverability, etc.

To participate, visit: spaces.internet2.edu/display/incinterfed Weekly calls Tuesday noon Central Time Join the list All are welcome!