Presentation is loading. Please wait.

Presentation is loading. Please wait.

Directory Enabled AuthN/Z at Clemson LDAP yesterday, Shibboleth tomorrow Jill Gemmill Barry Johnson Jill Gemmill Barry Johnson.

Similar presentations


Presentation on theme: "Directory Enabled AuthN/Z at Clemson LDAP yesterday, Shibboleth tomorrow Jill Gemmill Barry Johnson Jill Gemmill Barry Johnson."— Presentation transcript:

1 Directory Enabled AuthN/Z at Clemson LDAP yesterday, Shibboleth tomorrow Jill Gemmill Barry Johnson Jill Gemmill Barry Johnson

2 Early adopters of Directories  Since mid 1990’s  Event-driven provisioning into/from directory  Developers of DirXML (Novell Identity Manager)  Use of Blackboard as GUI for collaborative spaces  Since mid 1990’s  Event-driven provisioning into/from directory  Developers of DirXML (Novell Identity Manager)  Use of Blackboard as GUI for collaborative spaces

3 Clemson myCLE

4 Auto-provisioned Tools per VO  Address Book  Blog Tool  Calendar  Drop Box  EDU Assessment Tool  Glossary  HomePage  Address Book  Blog Tool  Calendar  Drop Box  EDU Assessment Tool  Glossary  HomePage  My Files  mySQL Database  Organization Portfolio  Search  Survey Tool  Tasks  Wiki  General Web Space  -Etc!  My Files  mySQL Database  Organization Portfolio  Search  Survey Tool  Tasks  Wiki  General Web Space  -Etc!

5 So, why Shibboleth?  Placing attributes and also Access Control Roles in Directory became cumbersome to enforce correctly for each application  Had come to conclusion that attribute based access control was needed, and Shibboleth appeared to be best solution available.  Placing attributes and also Access Control Roles in Directory became cumbersome to enforce correctly for each application  Had come to conclusion that attribute based access control was needed, and Shibboleth appeared to be best solution available.

6 Shibboleth today at Clemson  Production Shibboleth IdP  In use for a few applications, including a GridShib CA for use in Open Science Grid  Plans in place to migrate current applications to Shibboleth Service Providers  State-wide consortium : Health Sciences South Carolina  Production Shibboleth IdP  In use for a few applications, including a GridShib CA for use in Open Science Grid  Plans in place to migrate current applications to Shibboleth Service Providers  State-wide consortium : Health Sciences South Carolina

7 Health Sciences South Carolina http://www.healthsciencessc.org/

8 HSSC Shibboleth Working Group  Clemson University  Greenville Hospital System University Medical Center  Palmetto Health  Medical University of South Carolina  University of South Carolina  Spartanburg Regional Health Care System  Clemson University  Greenville Hospital System University Medical Center  Palmetto Health  Medical University of South Carolina  University of South Carolina  Spartanburg Regional Health Care System

9 Grids Today at Clemson  Condor Pool : A campus grid linking over 1700 machines distributed across 27 locations on campus providing a high throughput computing resource for all faculty and students in need of a loosely coupled computer system to run thousands of jobs. Applications from civil engineering, economics and chemistry have already benefited.

10 Grids and Shibboleth…Coming Soon  Access to HPC/HTC resources will be authorized using Shibboleth, consistent with other campus applications  Collaboration environments such as myVocs, Sharpe will be used as guides to revising Clemson’s existing access control and provisioning systems.  Access to HPC/HTC resources will be authorized using Shibboleth, consistent with other campus applications  Collaboration environments such as myVocs, Sharpe will be used as guides to revising Clemson’s existing access control and provisioning systems.


Download ppt "Directory Enabled AuthN/Z at Clemson LDAP yesterday, Shibboleth tomorrow Jill Gemmill Barry Johnson Jill Gemmill Barry Johnson."

Similar presentations


Ads by Google