1. The Future of Campus Single Sign-On
Warren Leung

2. Brief History
WebAuth
90’s home grown Single Sign On (SSO) system
Widely deployed on campus – 400+ applications
Works only for applications hosted at UCI
Security Assertion Markup Language (SAML) – Shibboleth
SAML 1.0 released in 2000’s
OASIS Standard
Federation enabled
Gaining adoption – 100+ applications at UCI
This is the next step forward

3. Why?
Standards based
Reduced application development overhead - no additional LDAP call for data
Real-time data delivery at sign in
Widely adopted world wide
Federation Support
Language agnostic
Secure

4. Tentative Timeline End of October 2020 – 2021 2021 – 2022 Early 2022
New Look and Feel for WebAuth and Shibboleth UI
2020 – 2021
Provide training and how to documentation to assist users migrating
New SSO integrations should be SAML based and not WebAuth
Begin migrating WebAuth based applications to SAML
2021 – 2022
Migrate all remaining WebAuth Applications
Early 2022
Shut down WebAuth

5. New UI

6. How does it work?

7. Working with the Shibboleth SP
Install Shibboleth Service Provider (SP)
Works on Apache, IIS, NGINX, Mac
Update configuration files
Read environmental variables at sign in

8. Questions?

9. Thank You