1. Projecting Infrastructure to the CLOUD CSG discussion Fall 2012 @ Princeton University

2. What do we mean by Infra? Identity integrations Extending local net to cloud – Amazon VPC Compute & Storage Contracts, FERPA, exit strategies, Security Sole source? Cloud vendors come & go – hedge your bets

3. What do we mean by Projecting? Deciding to engage with a provider Figuring out how to manage user access Determining limits of “elasticity” Figuring out roles, escalation for on-prem support groups Figuring out whether/how to be responsible for institutional data

4. We are NOT discussing… What is cloud and all that sort of nonsense

5. 4 discussion areas Identity, Federation & Attribute Release Contracts Beyond Identity Skills & Org

6. Identity Integration Federated Access anyone? Release directory info! Get your SPs into the federation! Attribute release perceived to be complex – http://www.cmu.edu/computing/web/authenticat e/web-login/policy.html – Keep it simple. Proves powerful. From Iowa CSG – Net+ remains a concern in this area. Advice to vendors being developed.

7. Contracts… We spend lots of time on compliance and security issues. All good. We don’t spend time contracting for missing functionality and defining the relationship. – i.e. Groups integrations for Box – CMU/PSU Require joining InCommon, specific software interop requirements Collaborations within CSG (and beyond) – has this been deemed successful? (Google/MS contract) Is Net+ the answer here? – probably not the only answer?

8. Beyond Identity Easy & Hard – 2 Each 1.Contract 2.Funding & value proposition 3.Payment 4.User & stakeholder communication, documentation, policy changes 5.User support 6.De/provisioning accounts or credentials 7.Authentication 8.Managing access (admins, users, groups, sharing) 9.Security, compliance, privacy 10.Data integration 11.Backup/restore 12.Adequate bandwidth, availability, capacity 13.Logging & monitoring 14.Service management processes: incident, request, change, problem

9. Are your skills & org structure ok for this? Yes – which? 1.Provisioning – IDM team 2. Cloud strategy team – 3 have it. No – which & why? 1. Deprov 2. Most do not have cloud oriented teams