1. Shibboleth in Switzerland
Internet2 Spring Meeting 2004
Thomas Lenggenhager
Overview
SWITCH & SWITCHaai Project
SWITCHaai Federation
Integrating Resources into legal framework
Virtual Home Organizations

2. SWITCH SWITCH – The Swiss Education & Research Network
a foundation of the federal and regional governments
provides connectivity
redundant dark-fiber based backbone
and network services for Swiss universities
AAI, video conference, mail gateways, …
12 universities 110’000 students 47’000 faculty & staff
7 universities of applied sciences 36’000 students 17’000 faculty & staff
Swiss population ~ 7 million

3. SWITCHaai SWITCHaai – Authentication & Authorization Infrastructure
Shibboleth selected as architecture in mid 2003
current status:
migration from pilot to production service
5 Home Organizations at bigger universities
SWITCH HomeOrg & Virtual Home Organization (VHO)
3 e-learning resources in use by students
public demo resources

4. SWITCHaai Federation SWITCH acts as federation service provider
Federation membership based on signed service agreements

5. Resources and the Federation
Resource has to belong to an organization of a federation member
Resource Registry
Resource description (technical & human oriented)
Resource owner
Attribute requirements
Community of interest
Information source for ARP generation
Third Party Resources
Integration of Federation Partners: for further study

6. Virtual Home Organization – VHO
Problem: Users without a shibbolized Home Org
What shall they do?
Solution: Virtual Home Organization
The exception, not the rule!
Minimal information
Clearly marked as special users through swissEduPersonHomeOrganizationType = vho
use of entitlement attribute for authorization
Project/resource oriented
Users managed by the project/resource owner
One user might have multiple identities