1. Shibboleth Middleware Project Tivoli - Update Mark Simpson - IBM/Tivoli October 4, 2001 Internet 2 Fall Member’s Meeting

2. What is unique about this project? Provides “Federated” administrative model (as apposed to centralized or delegated) –Leaves administration of user and authenticating user to requester’s site –Leverages existing authentication/directory infrastructure Privacy of requester preserved Leverages SAML standard and will be one of its first “proof points” Applies to B2B environments beyond current scope and definition

3. Project meeting our expectations? “Real world” requirements –UCAID/I2 provides a “one of a kind” perspective Innovative ideas and leading edge technology A unique partnership –Partner to solve a tough problem in academic community with direct application and relevance elsewhere –The teams bring different, but complimentary skills to the project –Access Management is key to IBM and Tivoli’s software strategy

4. IBM and Tivoli’s commitment IBM/Tivoli has been contributing to the architecture and design for over a year IBM/Tivoli is committed to contributing to an open source implementation –Prototype underway IBM/Tivoli is committed to continuing to drive ubiquitous Security standards –Shibb is based on existing standards where they exist –SAML, etc...

5. Project Status Lots of mindshare building around this initiative/partnership world wide! Architecture and High Level Design mostly complete Coding team assembled –“distributed” IBM/Tivoli, CMU and OSU team! –Austin lab/build environment established –Working implementation/design issues –Some prototyping has begun Working both Open Source and Tivoli value added solutions (Tivoli Policy Director)

6. What happens in the next 3 months? Finalize/Document Architecture and High Level Design –Resolve outstanding architectural and design issues Allows focus on code delivery Close Low level Design issues –Again, focus on code delivery Did I say focus on code delivery???