Inter-institutional Authorisation using Shibboleth: Myths, Lies and...
Transcript of Inter-institutional Authorisation using Shibboleth: Myths, Lies and...
![Page 1: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/1.jpg)
http://iamsect.ncl.ac.uk/
Inter-institutional Authorisation using Shibboleth:Myths, Lies and the Truth
Jon DowlandIAMSECT project officer
University of Newcastle upon Tyne
![Page 2: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/2.jpg)
http://iamsect.ncl.ac.uk/
Overview
• Definition and demonstration
• Current state of the art• Shibboleth is…• Who’s doing what?
• Wrap-up• Questions
![Page 3: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/3.jpg)
http://iamsect.ncl.ac.uk/
Shibboleth
Then said they unto him, Say now Shibboleth: and he said Sibboleth: for he could not frame to pronounce it right. Then they took him, and slew him at the passages of Jordan: and there fell at that time of the Ephraimites forty and two thousand.
Judges 12:5-7
![Page 4: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/4.jpg)
http://iamsect.ncl.ac.uk/
Shibboleth
“Shibboleth, is a bit like the duck which moves serenely through the water, but is paddling furiously beneath the surface.”
- Derek Morrison
![Page 5: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/5.jpg)
http://iamsect.ncl.ac.uk/
Live demonstration
![Page 6: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/6.jpg)
http://iamsect.ncl.ac.uk/
Shibboleth is a Single Sign-On (SSO) solution
Statement
![Page 7: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/7.jpg)
http://iamsect.ncl.ac.uk/
Shibboleth is a Single Sign-On (SSO) solution
Statement
![Page 8: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/8.jpg)
http://iamsect.ncl.ac.uk/
Single Sign-On solutions
• Pubcookie - http://www.pubcookie.org/
• Yale CAS http://www.yale.edu/tp/auth/
![Page 9: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/9.jpg)
http://iamsect.ncl.ac.uk/
Authentication/Authorisation
Existing approaches
![Page 10: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/10.jpg)
http://iamsect.ncl.ac.uk/
HTTP Authentication (May 1996 or earlier)
![Page 11: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/11.jpg)
http://iamsect.ncl.ac.uk/
>>> GET /temp/auth/ HTTP/1.0
<<< HTTP/1.1 401 Authorization Required<<< WWW-Authenticate: Basic realm="Invitation Only"<<< Content-Type: text/html
>>> GET /temp/auth/ HTTP/1.0>>> Authorization: Basic xxxxxx
<<< HTTP/1.1 200 OK<<< Content-Type: text/html<<<<<< hello world
Browser prompts for username/password
![Page 12: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/12.jpg)
http://iamsect.ncl.ac.uk/
HTTP: Drawbacks
• Lack of ‘theme-able’ log-in– ‘help’
– ‘mail me my password’
– Etc.
• ‘Authorization:’ and authentication mixed-up
• Passwords sent in-the-clear
• No log-out mechanism
![Page 13: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/13.jpg)
http://iamsect.ncl.ac.uk/
Athens (1996)
• Admired internationally, best of breed
• Single ID, multiple sign-on
• UK education and health
• Secure
• centralised
User Athens Service
![Page 14: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/14.jpg)
http://iamsect.ncl.ac.uk/
Athens D.A. (Oct 2002)
• Athens + SSO +
• devolved (locally managed) authentication
Athens
Login
ServiceUser
Service
Institution
![Page 15: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/15.jpg)
http://iamsect.ncl.ac.uk/
ADITUSAMADEUSAMICO libraryAPU Library ProxyAxiomBANKSCOPEBIDS CAB AbstractsBIDS IBSS ServiceBIDS Silver Platter INSPEC serviceBIDS SilverPlatter PsycINFO ServiceBLISSBMJ JournalsBioMed CentralBlackwell-Synergy.comBritish Standards OnlineBusiness Ratio ReportsButterworths Accountancy DirectButterworths All England DirectButterworths Banking Law DirectButterworths Businesscompliancedirect.coButterworths CaseSearchButterworths Civil Procedure OnlineButterworths Commercial Property LawButterworths Corporate FinanceButterworths Corporate Law DirectButterworths Crime OnlineButterworths EBL Direct EssentialsButterworths EBL Direct PremiumButterworths EOR DirectButterworths EU DirectButterworths Employment OnlineButterworths Family and Child DirectButterworths Financial Regulations ServiButterworths Forms and Precedents DirectButterworths HSE DirectButterworths Halsbury's Laws of ...Butterworths Human Rights DirectButterworths IRS Employment ReviewButterworths Immigration and Asylum LawButterworths Insolvency Law DirectButterworths Intellectual Property ...Butterworths International TaxButterworths Law DirectButterworths Law Reports DirectButterworths Legal UpdaterButterworths Legislation DirectButterworths Licensing DirectButterworths Local Government DirectButterworths PI OnlineButterworths PensionsProButterworths Property Tax DirectButterworths Scotland DirectButterworths Scots Law DirectButterworths Sergeant Sims Stamp Duty
Butterworths Stair MemorialButterworths Stone's Justices ManualButterworths Tax DirectButterworths Tax Planning ServiceButterworths Trusts and Estates DirectButterworths UK & International GAAPplusButterworths US Banking Editions OnlineCHEST Associated Site ContactsCHEST Further Education Site ContactsCHEST Higher Education Site ContactsCHEST Ireland Site ContactsCSA AqualineCSA Artbibliographies ModernCSA Internet Database ServiceCSA Linguistics & Language BehaviourCSA e-psycheCartalinxCensus Dissemination UnitCensus Geography Data Unit (UKBORDERS)Census Interaction Data ServiceCensus Learning ResourcesCensus Microdata Unit at the CCSRCensus Registration ServiceChadwyck-Healey KnowEuropeChadwyck-Healey KnowUK DatabaseChadwyck-Healey LION for collegesChadwyck-Healey Literature OnlineChadwyck-Healey PCI Full Text DatabaseChildlink.co.ukCity University Virtual LibraryCochrane LibraryComputer AbstractsCreative ClubCrossFire Service (PLUSABGM)CrossFire self-teach modules (MIMAS-XFT)Dialog DataStarDialog Education@SiteDialog@SiteEBSCOhost EJSEBSCOhost databasesEDINA AGDEXEDINA BIOSISEDINA BIOSIS Previews 1969 - 1984EDINA CAB AbstractsEDINA CompendexEDINA DigimapEDINA EconLitEDINA INSPECEDINA Index to The Times, 1790 - 1980EDINA MLAEDINA PAISEDINA UPDATEEEBOEIU Citydata
EIU CountrydataEIU Marketindicators & ForecastsESDS InternationalESDU DataESRI NTF ConvertersEducation Image GalleryEducation Media OnLineEducation Media OnLine medical-restrictElectronic Surgeons in Training EducatioEmerald FulltextEmerald Management ReviewsEncyclopaedia BritannicaEngineering Village 2Extenza e-Publishing ServiceFAMEGale Group InfoTracISI JCR Science EditionISI JCR Social Sciences EditionISI Web of KnowledgeIdrisiIngenta Full Text JournalsIngenta SelectInt. Civil Engineering AbstractsIrish Reports and DigestIsle of Man GIS dataJASPERJUSTIS Celex and OJCJUSTIS Daily CasesJUSTIS ECJ ProceedingsJUSTIS Family LawJUSTIS HermesJUSTIS Human RightsJUSTIS Industrial CasesJUSTIS Law Reports (eLR)JUSTIS Law Reports DigestJUSTIS Lloyd's Law ReportsJUSTIS Mental Health Law ReportsJUSTIS Official Journal CJUSTIS Prison Law ReportsJUSTIS UK Statutes and SIsJUSTIS Weekly LawJobs admin stuffJustCiteKeynoteKumarandClark.comLexisNexisMD ConsultMETAPRESSMIMAS ISI BIOSIS PreviewsMIMAS ISI Chemistry ServerMIMAS ISI Current Contents ConnectMIMAS ISI Derwent Innovations IndexMIMAS InfoterraMIMAS Landmap
MIMAS Landmap MediterraneanMIMAS LitLinkMIRA Virtual Automotive Info CentreMartindale & Stockleys Drug InteractionsMintel ReportsMulberryNeLH Evidence-Based on CallNeLH Journal of Medical ScreeningNetLibraryNewsBank InfoWebOCLC FirstSearch ServiceOSIRISOvid OnlineOxford English Dictionary OnlineOxford Reference OnlinePapyrus software for DOSPapyrus software for the MacParlianetPerfect AnalysisPrimal Pictures Basic Anatomy (NHS)Primal Pictures anatomy.tvProQuestProQuest Reference AsiaRCS Affiliates AreaRCS Discussion ForaRCS Library Electronic JournalsRCS Members AreaRefWorksReuters Business Insight UnlimitedSCOTBIS: Members AreaSCRAN Web SiteScienceDirectSentient DISCOVERSilverPlatter Arc2Snapshots International: Market ResearchStatistical Accounts of ScotlandSwetsWiseSynsoft HYDRA and HYDRA ONLINETRILTTaylor and Francis eBook SubscriptionsTechnical Indexes Info4EducationTechnical Indexes Info4HealthEstatesThe Academic LibraryThe Times Law ReportsUK JSTOR Mirror ServiceWILSONWEBWestlaw UKWiley InterScienceWriteNoteXpertHRZETOC - BL Electronic Table of ContentseSTEP administrators resourceimages.MDxreferplus
Athens services
![Page 16: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/16.jpg)
http://iamsect.ncl.ac.uk/
Shortcomings
![Page 17: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/17.jpg)
http://iamsect.ncl.ac.uk/
Shortcomings
• Usage statistics
• Bureaucracy and ad-hoc groups (VRGs)
• Fine-grained access control
• Privacy and anonymity
• Reluctant international services
![Page 18: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/18.jpg)
http://iamsect.ncl.ac.uk/
Shibboleth is…
detailed demo
![Page 19: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/19.jpg)
http://iamsect.ncl.ac.uk/
![Page 20: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/20.jpg)
http://iamsect.ncl.ac.uk/
User attempts to access service
![Page 21: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/21.jpg)
http://iamsect.ncl.ac.uk/
http://bruno.dur.ac.uk/
![Page 22: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/22.jpg)
http://iamsect.ncl.ac.uk/
Interlude: where are they from?
• Autodiscovery (e.g. by host)
• Manual
![Page 23: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/23.jpg)
http://iamsect.ncl.ac.uk/
Interlude: where are they from?
• Autodiscovery (e.g. by host)
• Manual
Unreliablewe’re trying to simplify the service provider
SimpleUser burden
![Page 24: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/24.jpg)
http://iamsect.ncl.ac.uk/
User redirected to “WAYF”
![Page 25: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/25.jpg)
http://iamsect.ncl.ac.uk/
https://wayf.sdss.ac.uk/shibboleth-wayf/...
![Page 26: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/26.jpg)
http://iamsect.ncl.ac.uk/
User directed to “home”
![Page 27: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/27.jpg)
http://iamsect.ncl.ac.uk/
https://weblogin.ncl.ac.uk/cgi-bin/index.cgi
![Page 28: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/28.jpg)
http://iamsect.ncl.ac.uk/
User provides credentials
![Page 29: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/29.jpg)
http://iamsect.ncl.ac.uk/
Existingdatabase
“home” authenticates user
![Page 30: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/30.jpg)
http://iamsect.ncl.ac.uk/
Existingdatabase
Attributes are exchanged
![Page 31: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/31.jpg)
http://iamsect.ncl.ac.uk/
Existingdatabase
User directed to service
![Page 32: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/32.jpg)
http://iamsect.ncl.ac.uk/
From the flyer
“Shibboleth is a fine-grained authorization framework which
separates responsibility for authenticating a user from the
responsibility of authorizing their access to a resource.”
![Page 33: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/33.jpg)
http://iamsect.ncl.ac.uk/
Authentication Authorisation≠
Who someone is
What someone can do
![Page 34: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/34.jpg)
http://iamsect.ncl.ac.uk/
Identity Provider
Authentication
![Page 35: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/35.jpg)
http://iamsect.ncl.ac.uk/
Identity Provider
•home institution
•trusted
Authentication
![Page 36: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/36.jpg)
http://iamsect.ncl.ac.uk/
Identity Provider
Attribute Exchange
•home institution
•trusted
![Page 37: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/37.jpg)
http://iamsect.ncl.ac.uk/
Case studies
• Course specific sensitive material
• Enrolled courses!
AttributeCase Study
![Page 38: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/38.jpg)
http://iamsect.ncl.ac.uk/
Case studies
• Fully-private, anonymous access
• Nothing!
AttributeCase Study
![Page 39: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/39.jpg)
http://iamsect.ncl.ac.uk/
Identity Provider
Attribute Exchange
•Secure
•Pre-agreed information
•home institution
•trusted
![Page 40: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/40.jpg)
http://iamsect.ncl.ac.uk/
Service ProviderIdentity Provider
Attribute Exchange
•Secure
•Pre-agreed information
•home institution
•trusted
![Page 41: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/41.jpg)
http://iamsect.ncl.ac.uk/
Service ProviderIdentity Provider
•Secure
•Pre-agreed informationAttribute Exchange
•No user database
•No synchronization
issues
•home institution
•trusted
![Page 42: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/42.jpg)
http://iamsect.ncl.ac.uk/
Terminology: Federations
?
![Page 43: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/43.jpg)
http://iamsect.ncl.ac.uk/
Federations
24 relationships 8 relationships
Simplified relationships
![Page 44: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/44.jpg)
http://iamsect.ncl.ac.uk/
Example Federations
• InQueue
• InCommon
• Athens
• SDSS
![Page 45: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/45.jpg)
http://iamsect.ncl.ac.uk/
Who’s doing what
![Page 46: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/46.jpg)
http://iamsect.ncl.ac.uk/
U.S.
• Internet2 consortium
• Incommon federation– 16 universities
– 4 others
![Page 47: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/47.jpg)
http://iamsect.ncl.ac.uk/
Around the world
• Switzerland – SWITCH
• Finland – HAKA
• Australia, Hungary, Croatia deploying
• Rest of Europe: contemplating
![Page 48: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/48.jpg)
http://iamsect.ncl.ac.uk/
U.K.
• BECTA – ICT/schools– Shibboleth pilot
• JISC– Core middleware
– Distributed e-learning
– Early adopters
– …
![Page 49: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/49.jpg)
http://iamsect.ncl.ac.uk/
• “Inter-institutional Authorisation Management to Support eLearning with reference to Clinical Teaching”
• JISC Core Middleware
http://iamsect.ncl.ac.uk/
![Page 50: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/50.jpg)
http://iamsect.ncl.ac.uk/
• Collaboration– Durham
– Newcastle• Web team
• Faculty of Medical Sciences
– Northumbria
Inter-institutional
![Page 51: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/51.jpg)
http://iamsect.ncl.ac.uk/
Authorisation, Clinical Teaching
• a proverbial goldmine of privacy and confidentiality issues
• Involvement of Newcastle FMSC
![Page 52: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/52.jpg)
http://iamsect.ncl.ac.uk/
• Shared students
Authorisation, Clinical Teaching
![Page 53: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/53.jpg)
http://iamsect.ncl.ac.uk/
Authorisation, Clinical Teaching
• In-house medical-oriented virtual learning environment (VLE)
![Page 54: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/54.jpg)
http://iamsect.ncl.ac.uk/
What we’ve done (1)
• Technical-oriented guides– Local SSO (pubcookie)
– Shibboleth Identity Provider
• Creative Commons
![Page 55: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/55.jpg)
http://iamsect.ncl.ac.uk/
Creative Commons
![Page 56: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/56.jpg)
http://iamsect.ncl.ac.uk/
What we’ve done (2)
• Shibboleth origin installation
• Shibboleth target installation
• target/zope integration
• federation testing
Techie
![Page 57: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/57.jpg)
http://iamsect.ncl.ac.uk/
What we’ve done (3)
Non-techie
• Glossary
• Questionnaire
• Dissemination
![Page 58: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/58.jpg)
http://iamsect.ncl.ac.uk/
What we’re doing
• Further Zope-based VLE work
• Blackboard VLE
• Managerial documentation
• Further events
![Page 59: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/59.jpg)
http://iamsect.ncl.ac.uk/
Future guides (1)
How to identify attributes, attribute stores
• Which attributes are useful
• Identifying stores
• Pros and con of store types
![Page 60: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/60.jpg)
http://iamsect.ncl.ac.uk/
Future guides (2)
A managerial guide to getting shib
• what skill set you need in your team
• Privacy & data protection issues
• Certificate provider issues
• Negotiating in a federation
![Page 61: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/61.jpg)
http://iamsect.ncl.ac.uk/
What other people are doing
• SDSS – development federation
• AMIE – distributed attribute management
• PERSEUS – Shibboleth and portals
• GUANXI – Bodington VLE
• http://www.jisc.ac.uk/index.cfm?name=programme_middleware
![Page 62: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/62.jpg)
http://iamsect.ncl.ac.uk/
Summary
• State of the art has drawbacks
• Shibboleth might address them
• Lots of work taking place
![Page 63: Inter-institutional Authorisation using Shibboleth: Myths, Lies and …iamsect.ncl.ac.uk/dissemination/iwmw2005/wmwpres.pdf · British Standards Online Business Ratio Reports Butterworths](https://reader033.fdocuments.net/reader033/viewer/2022050421/5f906cc5fdbb18518e561472/html5/thumbnails/63.jpg)
http://iamsect.ncl.ac.uk/
Questions