1. Presented by: Doug Falk National Student Clearinghouse Student Access to Federal Loan Data and Other Online Student Services

2. Agenda 4/26/20152 Clearinghouse Overview Student Self-Service (SSS) SSS Challenges Shibboleth Implementation Shibboleth Challenges

3. What is the Clearinghouse? 4/26/20153 A non-profit organization serving as a centralized educational agent in fulfilling educational reporting needs

4. Nationally More than 3,200 collegiate institutions –Enrolling over 92% of all higher education students More than 2,000 high schools 4/26/20154 Current Clearinghouse Participation

5.  Campus-based authentication with single sign-on to SSS  Through SSS, institutions can enable their students to perform a wide range of enrollment verification activities via the Web for free, including: Print enrollment certificates (which they can send to health insurers, housing providers and others) View enrollment history Check enrollment verifications that the Clearinghouse has provided to student service providers on their behalf View student loan deferments Link to real-time information on their student loans via Meteor 4/26/20155 Student Self-Service (SSS)

6. 4/26/20156 Student Self-Service

7. 4/26/20157 Student Self-Service

8. 4/26/20158 Student Self-Service

9. 4/26/20159 Student Self-Service

10. 4/26/201510 Student Self-Service

11. 4/26/201511 Student Self-Service  Institution requirements: –Sign Clearinghouse SSS Agreement Certify that they are in compliance with NIST electronic authentication guidelines for assurance level 1 (“standard” SSS access) Optionally certify that they are in compliance with NIST electronic authentication guidelines for assurance level 2 (“enhanced” SSS access including Meteor) –Implement the Clearinghouse specified methods for server-to-server authentication –Provide proper authentication of students

12. 4/26/201512 Student Self-Service

13.  Currently, there are around 500 institutions using SSS. Current challenges include: Requires custom coding at each institution Disparate authentication methods deployed by institutions Clearinghouse places a high level of trust with institutions to properly authenticate students Clearinghouse uses a proprietary method for establishing sessions Difficulty complying with NIST authentication guidelines Institutional use of SSN as student identifier 4/26/201513 SSS Challenges

14.  Implementing Shibboleth will provide: Easier implementation for participating InCommon institutions A robust, common framework for authentication and transitive trust A federation that governs rules for access and participation A system based on industry standards 4/26/201514 Shibboleth Implementation

15. 4/26/201515 Shibboleth Implementation  Institution requirements: –Sign Clearinghouse SSS Agreement Certify that they are in compliance with NIST electronic authentication guidelines for assurance level 1 (“standard” SSS access) Optionally certify that they are in compliance with NIST electronic authentication guidelines for assurance level 2 (“enhanced” SSS access including Meteor) –Join InCommon Federation –Implement Shibboleth in accordance with InCommon specifications –Provide proper authentication of students

16. 4/26/201516 Use Case 1: School First

17. 4/26/201517 Use Case 2: NSC First

18.  Currently, the Clearinghouse is piloting the Shibboleth implementation with Stanford University: Institution still must comply with NIST authentication guidelines Clearinghouse looking at InCommon Bronze and Silver assurance levels Institutional use of SSN as Shib Target Id Target Id can be an institutional Student Id, however: Clearinghouse follows PESC SchoolAssignedPersonID spec (20 characters) Institutional desire to use an opaque ID (much longer that 20 characters) Requires change to the Clearinghouse enrollment file extract (takes years for SIS providers to change) 4/26/201518 Shibboleth Challenges

19. 4/26/201519 Contact Doug Falk falk@studentclearinghouse.org (703) 742-4212