RCTSaai Federation Esmeralda Câmara May 29th 2009

Summary RCTS - What is it ? AAI - Why do we need it ? AAI - How it works AAI - Components Federation made AAI possible RCTSaai Federation History Current Status Roadmap

RCTS - What is it ?

AAI - Why do we need it ?

AAI - How it works

AAI - Components

Federation made AAI possible

RCTSaai Federation

History

Current Status

Roadmap

RCTS – What is it? RCTS – Portuguese Research and Education Network managed by FCCN FCCN - Foundation for National Scientific Computing

RCTS – Portuguese Research and Education Network managed by FCCN

FCCN - Foundation for National Scientific Computing

AAI - Why do we need it ? AAI – Authentication and Authorization Infrastructure Why do we need AAI ? Solution to the problem of inter-organizational authentication and authorization Implementation of an AAI

AAI – Authentication and Authorization Infrastructure

Why do we need AAI ?

AAI - How it works Step 1 - Authentication User always authenticate with their home organization Step 2 - Access Request of an authenticated user Step 3 - Authorization Attribute Delivery

Step 1 - Authentication

User always authenticate with their home organization

Step 2 - Access Request of an authenticated user

Step 3 - Authorization Attribute Delivery

AAI - Components IdP - Identity Provider Authenticates a user and sends the users attributes for the Service Provider SP - Service Provider Protects the resource and makes the access control decision based on the user’s attributes received from the Identity Provider WAYF – Where Are You From ? Identify a user’s home institution and redirect the user to the home institution’s authentication system

IdP - Identity Provider

Authenticates a user and sends the users attributes for the Service Provider

SP - Service Provider

Protects the resource and makes

the access control decision based

on the user’s attributes received

from the Identity Provider

WAYF – Where Are You From ?

Identify a user’s home institution and redirect the user to the home institution’s authentication system

Federation made AAI possible Federated access management is made possible by institutions and service providers agreeing to trust the information that they pass to each other and establishing rules and policies to make sure that this trust can be managed. RCTSaai is the Portuguese Federation for higher education coordinated and operated by FCCN » Germany (DFN-AAI) » Greece (HEAL-Link) » Luxembourg (Restena) » New Zealand (AAF) » Norway (FEIDE) » Spain (RedIRIS) » Sweden (SWAMID) » Switzerland (SWITCHaai) » The Netherlands (SURFnet) » United Kingdom (UK Access Fed.) » United States (InCommon) National Federations

RCTSaai is the Portuguese Federation for higher education coordinated and operated by FCCN

» Germany (DFN-AAI)

» Greece (HEAL-Link)

» Luxembourg (Restena)

» New Zealand (AAF)

» Norway (FEIDE)

» Spain (RedIRIS)

» Sweden (SWAMID)

» Switzerland (SWITCHaai)

» The Netherlands (SURFnet)

» United Kingdom (UK Access Fed.)

» United States (InCommon)

National Federations

RCTSaai RCTSaai Federation - How did we started ?

RCTSaai Federation - How did we started ?

RCTSaai - History Proof of Concept Documentation Know How FCCN and higher education institution were involved Successful integration with Shibboleth (Internet2) and SimpleSamlPHP (UNINETT) Moodle - Pilot Test federated service ( already have support for Shibboleth implemented)

Proof of Concept

Documentation

Know How

FCCN and higher education institution were involved

Successful integration with Shibboleth (Internet2) and SimpleSamlPHP (UNINETT)

Moodle - Pilot Test federated service

( already have support for Shibboleth implemented)

RCTSaai - Status Technical Services Identity Provider Deployment Wizard installation tools Discovery mechanism (WAYF) Official Federation Metadata Test Infrastructure Support Services Writing Installation and Deployment Guides Standard Definitions (Attribute Specification) Training and consulting (Workshop) RCTSaai Federated Services Arara (SoftPhone) Colibri (Web Conference) Moodle Installed Identity Providers

Technical Services

Identity Provider Deployment

Wizard installation tools

Discovery mechanism (WAYF)

Official Federation Metadata

Test Infrastructure

Support Services

Writing Installation and Deployment Guides

Standard Definitions (Attribute Specification)

Training and consulting (Workshop)

RCTSaai Federated Services

Arara (SoftPhone)

Colibri (Web Conference)

Moodle

Installed Identity Providers

RCTSaai - Roadmap All identity providers installed Policy Monitoring and management tools online Integrate available federated services with all installed Identity Providers RCTSaai Federated Services B-on Digital Library Service Edugain Confederation edugain goal is to develop a pilot confederation of national aais with the common language being SAML. Installed Identity Providers

All identity providers installed

Policy

Monitoring and management tools online

Integrate available federated services with all installed Identity Providers

RCTSaai Federated Services

B-on Digital Library Service

Edugain Confederation

edugain goal is to develop a pilot

confederation of national aais with the

common language being SAML.

Installed Identity Providers

Esmeralda Câmara [email_address] FCCN http://www.fccn.pt