Ray Collins27th September 2005LGfL Project – workshop report1 LGfL Project Report Proof of Principle of the Shibboleth Authentication & Authorisation Infrastructure (AAI)

Ray Collins27th September 2005LGfL Project – workshop report2 Session contents Drivers behind the project Methodology of the project Objectives & deliverables Work packages Participants Production infrastructure Issues to emerge Recommendations to Becta from the project Key stages for the National Strategy Becta AAI Federation... the foundations... National strategy... work packages and service elements... Becta AAI Federation... the structure... Becta AAI Federation... the relationships.... National Strategy... Phasing option... Post-project developments

Ray Collins27th September 2005LGfL Project – workshop report3 Drivers behind the project Existing demand from LEAs and end-users –Educationally desirable for learning –Solution to overcome management issues Emerging demand from Government Natural progression from previous projects –Unified sign-on – LGfL –Proof of concept – Leeds / IBIS Proof of concept worked at a technical level, however – ‘in the lab’ –single vendor only Needed evidence that concept worked ‘in the wild’

Ray Collins27th September 2005LGfL Project – workshop report4 Methodology of the project Prince 2 approach to project Formalised project board Project plan Project objectives Project deliverables Work packages Staged ‘work in progress’ demos at BETT & NAACE Quality acceptance plan and tests External evaluation report

Ray Collins27th September 2005LGfL Project – workshop report5 Objectives and deliverables Objectives:  To examine the Shibboleth model in further depth in a ‘real world’ environment  To provide additional evidence of the validity of the Shibboleth model  To identify issues arising out of this further examination Deliverables:  a working production environment that implements the architecture for the following Shibboleth entities: origin, target and WAYF  public demonstrations of the working of this architecture  two documents that will both evaluate the above environment and identify issues that require addressing in the preparation and implementation phases of a national rollout of an AAA system based upon Shibboleth architecture

Ray Collins27th September 2005LGfL Project – workshop report6 Work packages 6 packages addressing: –Production environment infrastructure –Requirements for suppliers of identity and service provider services –Demonstrations at BETT and NAACE –Contractual matters around Escrow and SLAs –Issues of security, interoperability and strategy –External evaluation

Ray Collins27th September 2005LGfL Project – workshop report7 Participants Atomwide Digitalbrain LGfL Becta PenCompass IBIS 33 LGfL LEAs + LEAs in 9 other RBCs Plus contact / research: –Internet2, SWITCH, FEIDE, InCommon, JISC

Ray Collins27th September 2005LGfL Project – workshop report8 Production infrastructure

Ray Collins27th September 2005LGfL Project – workshop report9 Issues to emerge UK school sector only participant at this sector level on the international Shibboleth stage UK school sector is fundamentally different from HE/FE Shibboleth-compliant AAI does work in the schools’ market place Design must be technically resilient and reliable Trust between all participants is a major key to success Successful implementation will not occur if left to existing market forces Insufficient mandate / resources within RBC / LEAs to implement a national solution

Ray Collins27th September 2005LGfL Project – workshop report10 Recommendations to Becta from the project Adopt Shibboleth as the authentication & authorisation infrastructure for UK schools and LEAs Adhere strongly to the Internet2 version Establish a Federation focussed on the schools’ sector The Federation must be commercially vendor-independent Becta should directly run or commission the Becta AAI Federation All participating entities to be compelled to do so through a formalised set of contracts Participating entity processes and standards should be subject to formal accreditation All entities must comply with data and child protection principles enforced through the contracts Adopt the submitted implementation plan and costs for the rollout of a national strategy by Becta

Ray Collins27th September 2005LGfL Project – workshop report11 Key stages for the National Strategy The following key stages were identified by the project to Becta:  Statement of strategic direction  Creation of the Becta AAI Federation as an entity  Sourcing of sufficient resources to guarantee delivery  Creation of the underlying services  Creation of various legal documents  Establishment of procedures  Recruitment of stakeholders  Entering into contractual agreements by various parties  Ongoing development of the Federation’s services  Interaction with national and international bodies  Provision of the operational aspects of the Federation

Ray Collins27th September 2005LGfL Project – workshop report12 Becta AAI Federation... the foundations... The project has submitted the following as possible foundations for the Becta AAI Federation: –Implementation plan detailed down to individual tasks –Costed proposal derived from the above implementation plan –Outline work packages for the implementation programme –Federation structures –Contractual schematic –Opportunity to phase from ‘live’ regional Federation to national roll-out

Ray Collins27th September 2005LGfL Project – workshop report13 National Strategy... work packages & services... The work packages are: Founding the Federation Setting the Standards Legal and Contractual Federation Resourcing Federation Services Communications The service elements covered are:  Infrastructure integration  WAYF service  Attribute Control Authority service  Accreditation service  Support services  Management  Contractual agreements

Ray Collins27th September 2005LGfL Project – workshop report14 Becta AAI Federation... the structure...

Ray Collins27th September 2005LGfL Project – workshop report15 Becta AAI Federation... the relationships...

Ray Collins27th September 2005LGfL Project – workshop report16 National Strategy... Phasing option...

Ray Collins27th September 2005LGfL Project – workshop report17 Post-project developments LGfLaai Federation is operating at a ‘regional’ level Further major development of the overall process, structures and documentation has taken place Business processes have been mapped Management database in operation On-line, web-based service to be launched which will minimise the potential ‘paper-chase’ / overload for participating entities