Federated peering the NREN way: eduGAIN and eduroam

Federated peering the NREN way: eduGAIN and eduroam

SURFfederatie Klaas Wierenga, EuroCAMP Helsinki, 17&18th April 2007 Contents - General intro Status

IdM practices/policy Policy enforcement Roles & groups Schemas LoA General introduction - Federation close to production status - Model with Central Federation Component (CFC) that translates federation protocols on-the-fly

(SAML/A-Select/ADFS/ID-FF) - Registration at privacy body (temporary storage of user data for FederatedSSO and/or federation protocol translation). - NO requirements wrt technology Status - Test/Acceptation federation now runs approx. 1.5 jaar - IdP's: RUG, UU, SURFnet, TU-Delft

- RADIUS IdP for eduroam customers, used by: HU, Avans, HvA, Saxion, HAN - Pilots with: Elsevier SD, Dutch publishers, Ellips consortium, SURFnet diensten - Scheduled: EBSCO, Microsoft, SURFdiensten, OCLC Pica IdM practices/policies - 2 parties: - FederatieLeden (federation members)

- Annex to regular contract with SURFnet - Low level entry - FPartners - contract between SURFnet and Partner - SURFnet is operator - Contracts, attributes that are needed for a service published at website - Userboard deputation of federation members Policy enforcement

- Federation Member - Sign and youre member - Club-model - Weak enforcement - Almost no formal rules wrt identity management - Some rules wrt privacy, 'good IdM' and dealing with abuse - Service Provider - MUST sign contract - Define service, attributes etc.

- Privacy regulations (best practice will be made available) - Requirements on certificate - organisation, hostname, friendly name Roles & groups - None - Federation is transparant channel - Federation is TTP (signing of certificates of SP's / IdP's)

Schemas used/planned - 2 requirements: - (opaque)[email protected] - organisation (IdP) - Schemas: study in Shibboleth pilot - SCHAC - IdM at institutions NOT homegeneous - Easy start with simple model - Presumably 4 or 5 mandatory fields, rest

optional Levels of AuthN - Unique selling point of A-Select since version 0.1! - Requires authN standardisation in the policy wrt IdM, naming and issuance

The SURFfederatie Thank you! More info:

http://federatie.surfnet.nl/ [email protected]

Recently Viewed Presentations

  • Engineering Teams

    Engineering Teams

    An Introduction to Engineering Teams Referencing Some of the material used in this lecture has been obtained from the websites listed. You should thus refer to the website for more details and to review the context in which the materials...
  • Solving Properties Log Rules Application Equations of Graphs

    Solving Properties Log Rules Application Equations of Graphs

    First word you think of when you hear "AROC" SECANT!! First word you think of when you hear "IROC" "yes, I do rock" just kidding.. TANGENT!! * * Rewrite the following in exponential form Log2(32) = 5 Rewrite the following...
  • An Introduction to P.R.o.B.E.

    An Introduction to P.R.o.B.E.

    Summarize Data by Charts Use Excel Use numerous free web resources for tabulating data Available Online Resources Online Action Research (PRBE) Training: School Counseling Program Evaluation A Series of Short Courses that introduce school counselors to the evaluation model, Program...
  • TGC Status - 東京大学

    TGC Status - 東京大学

    Randall Sundrum model に於ける KK Graviton の dimuon 崩壊の探索 石川 明正 (神戸大学) Extra Dimension 標準理論では重力は含まれていない 重力は弱すぎて高エネルギー粒子の衝突では観測出来ない 重力のスケール(Planck Scale) >> 電弱スケール 1019 GeV >> 100 GeV Q. なぜ重力はこんなに弱いのか?
  • Слайд 1 - Msu

    Слайд 1 - Msu

    Информационная безопасность в глобальных информационных сетях Практические аспекты ...
  • DeSSA Assessment Accommodations Search for Accommodations

    DeSSA Assessment Accommodations Search for Accommodations

    Password/account questions directed to DTCs and ISOs . Lisa Alexander - ... Evidence to support claims in mathematics and English language arts/literacy provided. ... Decisions about test choice and frequency determined by local choice.
  • Lewis Structures

    Lewis Structures

    Bond energy - amount of energy required to break a bond holding two atoms together. The values of bond energies decrease in order: triple > double > single. Example: N2 > O2 > H2 Bond Length Bond length - distance...
  • Sentence Corrections - AP Literature

    Sentence Corrections - AP Literature

    Until April 8 1974 Babe Ruth held the American record for home runs he held the record for bases on balls until April 26 2001. Now back to our sentence How to correct Until April 8 1974 Babe Ruth held...