Shibboleth at Cardiff University Lindsay Roberts Project Manager – Shibboleth Implementation Phase 2.

Slides:

Advertisements

Similar presentations

Athens and Shibboleth ® : the choices Phil Leahy Athens Product Manager.

Advertisements

Shibboleth and UKAMF-FEAR not as scary as it sounds! Rhys Smith Cardiff University.

Lousy Introduction into SWITCHaai

Options for integrating the JANET Roaming Service (JRS) and Shibboleth Tim Chown University of Southampton (UK) JISC Access Management.

Eduserv Athens Federations David Orrell Eduserv Athens Technical Architect.

FAME-PERMIS Project University of Manchester University of Kent London, July 2006.

Issues of collaborating in a Shibboleth FE/HE trust environment Graham Mason KC-ROLO.

Directorate of Learning Resources Accessing electronic journals from off-campus This causes lots of headaches, but dont despair, heres how to do it! If.

Next Generation Athens Services Ed Zedlewski UK e-Science Town Meeting, London, 11 April 2005.

Access & Identity Management “An integrated set of policies, processes and systems that allow an enterprise to facilitate and control access to online.

Joint Information Systems Committee 25/08/2014 | slide 1 JISC Core Middleware Programme Meeting Middleware in Development Joint Information Systems CommitteeSupporting.

Introduction to Shibboleth and the IAMSECT Project.

KC-ROLO Project Kidderminster College Repository Of Learning Objects Graham Mason & Ed Beddows.

ELAG Trondheim Distributed Access Control - BIBSYS and the FEIDE solution Sigbjørn Holmslet, BIBSYS, Norway Ingrid Melve, UNINET, Norway.

Shibboleth at Newcastle Caleb Racey Webteam ISS Shibboleth experiences Program  Background  What shib has enabled  Benefits of shib  How to do shib.

JISC Metaleth Project Athens, Shibboleth and the University of Bristol 29 th January 2007.

ICDL 2004, New Delhi1 Access Management for Digital Libraries in a well-connected World John Paschoud SECURe Project London School of Economics Library.

FSA ID TRANSITION Ditch the PIN. WHAT IS THE NEW FSA ID AND PASSWORD? U.S. Department of Education has a new login process beginning April 26 th for student-

Copyright JNT Association 20051OptionalCopyright JNT Association 2007 Overview of the UK Access Management Federation Josh Howlett.

Shibboleth & IMPETUS 1.What are they? 2.Demo. Shibboleth - A system to support the sharing of Web resources among organisations IMPETUS - Infrastructure.

Infrastructure for Multi-Professional Education and Training Using Shibboleth.

Shibboleth access management: a replacement for Athens and more? Mark Norman and Christian Fernau OUCS 21 June 2007.

Learning Management Systems Camp June 2004 Barry R Ribbeck UT HSC Houston Copyright, Barry Ribbeck, This work is the intellectual property of the.

Shibboleth Update a.k.a. “shibble-ware”

InCommon Policy Conference April Uses  In order to encourage and facilitate legal music programs, a number of universities have contracted with.

Administrative Information Systems Shibboleth: The Next Generation ISIS Technical Information Session for Developers Datta Mahabalagiri March

Developments in Access and Identity Management Phil Leahy – Athens Product Manager.

Federated A(A(A))I Jens Jensen hepsysman, RAL,

Project Shibboleth Update, Demonstration and Discussion Michael R Gettes Duke University (on behalf of the entire shib team!!!) June.

Identity Management in Education. Welcome Scott Johnson, NetProf, Inc. Creator of OmnID Identity Management for Education

Copyright JNT Association 2005Copyright JNT Association An Introduction to Access Management and the UK Federation Simon Cooper.

TNC2004 Rhodes 1 Authentication and access control in Sympa mailing list manager Serge Aumont & Olivier Salaün May 2004.

The I-Trust Federation: Federating the University of Illinois Keith Wessel Identity Management Service Manager University of Illinois at Urbana-Champaign.

The UK Access Management Federation for education and research John Chapman, Project Adviser, Technical Policy & Standards.

Shibboleth On-line Authentication System Jon Browne Senior Consultant Drew Heald BSc (Hons), MPhil, MCP Systems Developer IBIS Business Consultants Ltd.

LGfL Update Stewart Duncan LGfL Technical Manager Ian Lehmann LGfL Operations Manager.

Shibboleth A word which was made the criterion by which to distinguish the Ephraimites from the Gileadites. The Ephraimites, not being able to pronounce.

Shibboleth at Columbia Update David Millman R&D July ’05

Shibboleth: An Introduction

Shibboleth and TAGPMA Michael Helm DOEGRids/ESnet 27 Mar 2006.

MAT U M A T U Middleware Assisted Take-Up Service For JISC Funded Early Adopters.

Shibboleth: Status and Pilots. The Golden Age of Plywood.

1 Protection and Security: Shibboleth. 2 Outline What is the problem Shibboleth is trying to solve? What are the key concepts? How does the Shibboleth.

UIT Campus Systems & Infrastructure CAS Web Authentication.

Federated Access Management The Motherwell Experience Carole Gray.

Community Sign-On and BEN. Table of Contents  What is community sign-on?  Benefits  How it works (Shibboleth)  Shibboleth components  CSO workflow.

Identity Management in DEISA/PRACE Vincent RIBAILLIER, Federated Identity Workshop, CERN, June 9 th, 2011.

JISC Shibboleth Briefing, 12-Mar Everything I always wanted to know about Shibboleth John Paschoud SECURe Project, LSE Library …but was afraid to.

Grid Security and Identity Management Mine Altunay Security Officer, Open Science Grid, Fermilab.

Administrative Information Systems Shibboleth Install Session Technical Information Session for Developers Datta Mahabalagiri.

Shibboleth for Middle Schools James Burger -

Maryknoll Wireless Network Access Steps for Windows 7 As of Aug 20, 2012.

B2access.eudat.eu B2ACCESS User Training How to register with B2ACCESS Version 1 February 2016 This work is licensed under the Creative Commons.

Authentication and Authorisation for Research and Collaboration TeSS Service Provider Training, Manchester Authentication and Authorisation.

Blackboard Learning System r6 and Shibboleth Barry Ribbeck U.Texas Health Science Center at Houston Christopher Etesse Blackboard Inc.

Community Sign-On and BEN. Table of Contents  What is community sign-on?  Benefits  How it works (Shibboleth)  Shibboleth components  CSO workflow.

Seminar: Security / Identity Management Presentation: Elke Weber

Using Your Own Authentication System with ArcGIS Online

Shibboleth Architecture

Federation made simple

e-Infrastructure Workshop 28th March 2006, University of Leeds

Multifactor Authentication & First Time Login

Michael R Gettes, Duke University On behalf of the shib project team

Supporting Institutions Towards a Shibbolized Infrastructure

Brian Gilmore Computing Services, University of Edinburgh

Shibboleth: Status and Pilots

KC-ROLO Project Kidderminster College – Repository Of Learning Objects

Protecting Privacy with Federated AA

Presentation transcript:

Shibboleth at Cardiff University Lindsay Roberts Project Manager – Shibboleth Implementation Phase 2

Outline Whats the problem? What is Shibboleth? What have we done in Cardiff? Where are we now? For the future…

What's the problem? Users accessing many different systems/resources : User problems Lots of usernames/passwords to remember! Admin Problems Account creation and administration overhead Forgotten passwords Security Problems Security & Integrity compromised (e.g. abc123)

What is Shibboleth? Shibboleth: Offers single sign-on access to multiple web- based services Usernames and password at our end – standard network username/password Based on trust (and legal documents) within a federation

Shibboleth and Federations Federation... WAYF

Shibboleth-Athens Athens Resources Shib- Athens Federation... WAYF

How does Shibboleth work? WAYF AA User DB AA SSO Resource ACS AR Resource Manager I dont know who you are or where you are from… redirecting you to the home locator 1 2 So, where are you from? 3 4 CFU 5 Ok, redirecting you to your organisation 6 Dont know who you are: please login 7 Credentials 9 Handle I need to know attributes... Ask AA 8 Handle Ok, I know you! Redirecting you to the resource, with a handle Handle Service Provider Identity Provider Attributes 10 These are the attributes youre allowed to see: 11 Ok, youre allowed to see this. Here you go! Athens

What have we done in Cardiff? Early adopter funded by JISC Phase 1 – complete Led to entitlements group Phase 2 – in progress Extensive testing on resources Still 4 resources not Shibboleth compliant In the process of rewriting relevant documentation

Where are we now? Going live 1 st August for: New training grade doctors 1 st year undergrads, postgrads, new staff Existing users with expired passwords and problems

For the future Next summer Rest of Athens users in University 2008 Athens accounts turned off before we have to pay

Conclusion For users Shibboleth offers easier access to resources – dont have to remember yet another username/password This isnt the end Native Shibboleth…

an aside: Shibboleth? old testament (judges 12:1-6). ephraimites lived to the west of river jordan invaded gilead over river, defeated retreating, way blocked by the gileadites ephraimites/gileadites had different accents pronounced the sh sound as sh/si those crossing river asked to pronounce shibboleth (it means an ear of corn) 42,000 who pronounced it sibboleth were killed