1. University Computing Centre - Srce
Miroslav Milinović
University Computing Centre - Srce
EuroCAMP
Helsinki, April 2007

2. Contents general information IdM practices policy enforcement
roles & groups
schemas
authN & certs

3. General information
evolved from radius hierarchy (network access as killer app.)
SW base (RADIUS + LDAP + SOAP)
current architecture in full operation since 03/2006
213 (34) + 1 IdP (nearly enabled users)
SP: eduroam hot spots
around AuthN reqs processed per month
service types:
network access (eduroam: wired & wireless, dial-up, cable, EDGE/GRPS)
Web based services (LMS, web apps, helpdesks, ...)
computing resources (basic services)
coupled with national student card & information system of higher.ed.

4. IdM practices IdM policy
technical and organisational requirements
data has to be up-to date
f2f user registration (registered mail?)
IdPs have relative freedom but are considered liable for missuse
more formalisation and harmonisation needed
a large number of IdPs (diversity in size and technical expertise) is a challenge

5. Policy enforcement
IdPs: based on agreements with CARNet and Ministry of science, education and sport
resource registry for SPs
a large number of IdPs (diversity in size and technical expertise) is a challenge
different service classes (network vs. application access) need a different approach to different SPs (eduroam hotspots vs. apps. providers)
more formalisation planned

6. Roles & groups via specific atributes in hrEduPerson schema
hrEduPersonAffiliation, hrEduPersonPrimaryAffiliation, hrEduPersonRole
hrEduPersonProfessionalStatus, hrEduPersonAcademicStatus, hrEduPersonTitle, hrEduPersonScienceArea, hrEduPersonStudentCategory, hrEduPersonStaffCategory
hrEduPersonGroupMember
via specific AuthZ solutions at SP’s side
croGRID community as a driver for future development
federated identity (?)
tool for handling groups (?)

7. Schemas hrEduPerson, hrEduOrg use of SCHAC planned in (near) future
registry:
ver 1.2.
use of SCHAC planned in (near) future
harmonisation of attributes (attrib. values) for international (european) conferderations is a challenge

8. AuthN & certs SCS (TERENA) for services
user/passwd seems to be enough for (end)users
killer app. needed for (effective) deployment of other authN methods
X-CARD project (?)
croGRID – a separate case (SLCS solution)