1. Identity management, authentication and registration at the University of Helsinki Tietotekniikkaosasto Ismo Aulaskari 2.9.2008

2. Service perspective – bunch of applications Some authentication PortalWiki Blog Moodle Webmail Homegrown app X

3. Technologies used Central/Internal Authentication (University): radius, ldap, shibboleth (SAML2)‏ Common federation (Haka) with other universities: shibboleth/SAML2. Radius for eduroam State-wide: Vetuma, which uses Tupas

4. Authentication and IDM perspective Radius LDAP ADUnixNetware Shibbleth IDP Web applications, desktop applications, workstations, email, servers Light- account Lotus Notes Strong auth

5. Tupas Tupas is a certification service that’s standardized by Finnish Bankers’ Association Standard for authenticating and paying Costs per authentication/paying event Most citizens currently have internet banking accounts Usage in University of Helsinki requires Finnish SSN More information: http://www.fkl.fi/asp/ida/download.asp?prm1=wwwuser_fkl &docid=11302&sec=&ext=.pdf

6. User account management perspective Oracle (master)‏ LDAP AD Unix Netware Pull Student registry Employee registry The others ? To centralized authenticati on & authroziati on

7. Tools Master/Lohju: Oracle 10 database (and application) that includes all the information of the users and their accounts Synchronization scripts Huge automated script to populate LDAP Openldap 2.3 Two backend db:sdb:s Hot-swap-replicated Real cluster coming

8. Future perspective Even more centralized authentication Homegrown SSO - or better? Authorization by SAML? PortalWiki Blog Moodle Webmail Homegrown app X Hupnet

9. What?