1. Authentication and the Student Lifecycle (a view from one school) Robert Morley Assoc. Registrar, U. of Southern California State of e-Authentication in Higher Education August 20, 2004

2. Why is the Student Services area looking for a better authentication solution?

3. Constituencies (in a student lifecycle) Inquires/search population ApplicantsAdmits Current students (resident and distance learning) Student/faculty/staff combination AlumniDonors/associates

4. Current Methods of Authentication (at the University of Southern California) User ID & PIN (until 2004, ID usually SSN and PIN date of birth) PKI certificates Hashed values PubCookie/browser cookies Kerberos IP Range (library vendors) Shibboleth (under construction)

5. Legal Considerations (some pertinent only to California) *FERPA (Family Educational Rights & Privacy Act) GLBA (Gramm – Leach - Bliley Act) CA SB -168 (restricts use of SSN in CA) CA SB – 1386 (governs information protection standards and action in the event of an authorized release of personally identifiable information in California) * FERPA amended to accept electronic signatures; however, PINs cannot be derived/assigned based upon directory information, e.g. DOB, zip code, etc.

6. Systems That Support Students Preadmit database SIS (general information and services) AIS (payroll, bookstore, housing) ISD (research, email, etc.) Academic Unit databases

7. Student Access to Services and Information In-person transactions Telephone transactions (IVR) Web based transactions (including kiosks & computer labs)

8. The Authentication Challenge Pre-Student Status Current Student Status Post Student Status

9. Pre-Student Status InquireApplyAdmit Apply for Financial Aid Apply for Housing Apply for Parking

10. Current Student Status Registration Request for Transcripts Request for Verification/Certification Order books Pay University bills Access Blackboard

11. Post Student Status Register in Alumni Database Establish Financial Giving Program Register for Alumni Events

12. Establishing Identity Self reported information on the admission application establishes the person’s identity Corrections/adjustments to established identity must be supported by picture ID It is possible to establish and maintain identity without benefit/requirement of a “breeder” document

13. Obstacles Cost to implement and maintain Sufficient technical resources Difficult and time consuming to implement

14. The Contender(s)? Shibboleth Liberty Alliance Shibboleth Federation