Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Federated Access Management, JISC Presentation


Published on

A presentation given by Mark Williams of the JISC Access management Outrach Team at an RSC South east event at West Kent College on 16th May 2007. It looks at the key concepts of identity management as well as the technical benefits, issues of technical readiness and the choices available to learning providers.

Published in: Technology, Business
  • For further information on Federated Access Management go to http://moodle.rsc-southeast/course/view.php?id=29 (guest access is enabled)
    Are you sure you want to  Yes  No
    Your message goes here

Federated Access Management, JISC Presentation

  1. 1. Mark Williams Services Outreach, JISC [email_address] federated access management
  2. 2. Introduction The West Wing Warner Bros 2001
  3. 6.
  4. 7. Update <ul><li>Shibboleth update </li></ul>
  5. 8. Update <ul><li>Shibboleth update </li></ul><ul><li>Focus on Federated Access Management </li></ul><ul><ul><li>Shibboleth just one of / part of the technologies </li></ul></ul>
  6. 9. Introduction <ul><li>What is access management? </li></ul><ul><li>The Situation </li></ul><ul><li>The Choices </li></ul><ul><li>Why?: The business case </li></ul><ul><li>The Support </li></ul><ul><li>Discussion </li></ul>
  7. 10. Explaining federated access management <ul><li>Video highlights: </li></ul><ul><ul><li>Issues </li></ul></ul><ul><ul><li>Advantages </li></ul></ul><ul><ul><li>Situation </li></ul></ul><ul><li>Video Audience: </li></ul><ul><ul><li>SMT </li></ul></ul><ul><ul><li>Curriculum </li></ul></ul><ul><ul><li>LRC </li></ul></ul>Tool for YOU to use
  8. 11. JISC Announcement <ul><li>In March 2006, JISC formally announced its intention to support federated access management as the preferred access management solution for UK Further and Higher Education </li></ul><ul><li>JISC will continue funding the Athens service until July 2008 </li></ul><ul><li>Athens will be available via a subscription model post July 2008 </li></ul><ul><li>Institutions will have to Join the Federation to access JISC funded resources </li></ul><ul><li>The UK Access Management Federation launched in November 2006, with early adopters joining in August 2006 </li></ul><ul><li>The Federation is a combined venture between JISC and BECTA </li></ul><ul><li>A full support service will be made available to the JISC community to support the transition to the new service </li></ul>
  9. 12. What is Federated Access Management? <ul><li>Current Athens service is a centralised service: </li></ul><ul><ul><li>Institution provides information about users to Athens (identity information). </li></ul></ul><ul><ul><li>Athens brokers both authentication and authorisation on the part of the institution with service providers. </li></ul></ul><ul><li>Federated Access Management devolves authentication back to the institution: </li></ul><ul><ul><li>Authentication achieved through normal institutional log-on. </li></ul></ul><ul><ul><li>Service Providers trust institutions to appropriately authenticate. </li></ul></ul><ul><ul><li>Service Providers and institutions exchange information about users to determine what they can access (attributes: staff, student, law). </li></ul></ul><ul><ul><li>Same system can be used for internal, external and collaborative access (e-learning partnerships with other institutions, e-portfolios). </li></ul></ul>
  10. 13. The Push <ul><li>JISC Collections access </li></ul><ul><li>Athens pricing structure </li></ul><ul><li>Focus on legitimate use – Emphasis on correct use- non sharing of passwords etc </li></ul><ul><li>Expiry policy </li></ul><ul><li>Policy for populating user directory </li></ul>
  11. 14. The Pull <ul><li>Capability – institution – staff – students </li></ul><ul><li>International gold standard </li></ul><ul><li>Longevity: JISC supporting solution – Gateway developed to enable Eduserve solution </li></ul><ul><li>International – In common etc </li></ul>
  13. 16. Strategic Case: Example – Rummidge College Vision statement <ul><li>VISION STATEMENT: “Using a single password, students can access not only Rummidge College own electronic resources but also those of other universities, Colleges and institutions by co-operative agreements. </li></ul><ul><li>VISION STATEMENT: “Provide services which reduce the burden of administration and information management.” </li></ul><ul><li>VISION STATEMENT: “Provide services which facilitate scholarly communication, collaboration and research </li></ul><ul><li>Federated access management allows not only single sign-on internally using an institutional password, but also allows users to access resources (such as VLEs) at other institutions using that same password (i.e. no need to register elsewhere). </li></ul><ul><li>Devolved authentication means that institution do not have to administer Athens accounts and single sign-on reduces the need for libraries to manage people as well as resources. </li></ul><ul><li>Federated access management supports the adoption of ‘virtual organisations and key research tools (such as open access repositories) have been ‘federated’. </li></ul>24/7 Collaboration Lifelong learning Workbased learning Remote learning Regional Partnership
  14. 17. The Strategic Case: Questions to Ask <ul><li>Are there institutional drivers for: </li></ul><ul><li>The implementation of an enterprise directory / identity management solution? </li></ul><ul><ul><li>Need to manage ‘non-standard’ users more efficiently, need to manage all users more efficiently! </li></ul></ul><ul><li>Single (simplified) sign-on / devolved authentication? </li></ul><ul><ul><li>System for both internal and external resources. </li></ul></ul><ul><li>Collaborative access to resources within other institutions? </li></ul><ul><ul><li>HE / FE collaboration; franchises in other countries. </li></ul></ul><ul><li>Research collaboration? Private sector collaboration? </li></ul><ul><ul><li>‘Virtual Organisation’ support; third-stream funding opportunities. </li></ul></ul>
  15. 18. Institutional Options <ul><li>BECOME A FULL MEMBER OF THE FEDERATION USING COMMUNITY SUPPORTED TOOLS </li></ul><ul><ul><li>COSTS: Institutional effort to implement software, join federation and enhance institutional directories </li></ul></ul><ul><ul><li>BENEFITS: Full institutional control, skilled staff and access management solution for internal, external and collaborative resources </li></ul></ul><ul><li>BECOME A FULL MEMBER OF THE FEDERATION USING TOOLS WITH PAID-FOR SUPPORT </li></ul><ul><ul><li>COSTS: Cost of support from supplier and institutional effort in liaison with supplier and Federation </li></ul></ul><ul><ul><li>BENEFITS: Full support in implementation and access management solution for internal, external and collaborative resources </li></ul></ul><ul><li>SUBSCRIBE TO AN ‘OUTSOURCED IDENTITY PROVIDER’ TO WORK THROUGH THE FEDERATION ON YOUR BEHALF (SUCH AS USE OF CLASSIC ATHENS WITH THE GATEWAYS) </li></ul><ul><ul><li>COSTS: Subscription costs to external supplier (from July 2008) and internal administration role </li></ul></ul><ul><ul><li>BENEFITS: Minimum institutional effort to achieve access to external resources only </li></ul></ul>
  16. 19. Institutional Audit <ul><li>Strategic fit: Aims of the College </li></ul><ul><ul><li>Mission statement, Capability, Staff up-skilling, Collaboration, Costs </li></ul></ul><ul><li>Options appraisal: which choice meets business need </li></ul><ul><ul><li>How many resources do you access? </li></ul></ul><ul><ul><li>What do you want to do? </li></ul></ul><ul><li>Affordability </li></ul><ul><li>Capability </li></ul><ul><li>What will your choice solve? </li></ul>
  17. 20. Financial Case: procurement and commercial issues <ul><li>JISC ‘Institutional Preparedness’ Study (170 institutions): </li></ul><ul><li>Directory Services: </li></ul><ul><ul><li>66% HE / 69% FE use Active Directory </li></ul></ul><ul><ul><li>31% HE / 13% FE use Novell eDirectory </li></ul></ul><ul><ul><li>27% HE / 31 % FE use OpenLDAP </li></ul></ul><ul><li>Outsourcing / Delegation of Identity Management: </li></ul><ul><ul><li>2% of HE / 0% FE outsource directory / identity management </li></ul></ul><ul><ul><li>25% HE allow departmental control of identity management </li></ul></ul><ul><li>Current use of Athens: </li></ul><ul><ul><li>Classic Athens: 57% HE / 78% FE </li></ul></ul><ul><ul><li>AthensDA: 35% HE / 7% FE </li></ul></ul>
  18. 21. Reviewing Readiness How many institutions will adopt federated access by July 2008? (FE figures: Scotland, Wales and Northern Ireland only)
  19. 22. Financial Case: implementation and ongoing <ul><li>Costs associated with adopting federated access management need to be assessed on an institution by institution basis. </li></ul><ul><li>Depend on starting point (state of directory services, choice of directory services, use of Athens, size of institution etc. etc.). </li></ul><ul><li>Depends on ‘end’ goal (full single sign-on implementation or more lightweight approach). </li></ul><ul><li>Use case studies of ‘early adopters’ to judge where you might be – please contact me. </li></ul><ul><li>Talk to the early adopters (they are very nice). </li></ul><ul><li>NMI-EDIT full Enterprise Directory project example: £250,000 capital, £130,000 recurrent. </li></ul><ul><li>Simple adoption of federated access management: £5,000. </li></ul><ul><li>Early adopter projects: £50,000. All successful within these constraints. </li></ul><ul><li>Athens pricing </li></ul>
  20. 23. In Summary <ul><li>All institutions have options to consider regarding the adoption of federated access management. </li></ul><ul><ul><li>Gateways ensure that it is your decision and not ‘chicken and egg’. </li></ul></ul><ul><li>Institutions have a wide range of drivers that support the adoption of federated access management. </li></ul><ul><ul><li>Collaborative eLearning, eResearch, ePortfolios, Open Access Repositories, Information / Knowledge Strategies. </li></ul></ul><ul><li>It is important that this is planned and considered on an institutional basis. </li></ul><ul><ul><li>What is the best fit for your institution? </li></ul></ul><ul><ul><li>What’s in your strategy already? </li></ul></ul><ul><li>Lots of resources available to help in the planning process. </li></ul>
  21. 24. The JISC Roadmap
  22. 25. <ul><li>Federation official documentation </li></ul><ul><li> </li></ul>Support: UK Federation Website
  23. 26. <ul><li>JISC Website </li></ul><ul><ul><li>Case studies </li></ul></ul><ul><ul><li>Business case (May) </li></ul></ul><ul><ul><li>Awareness events </li></ul></ul><ul><ul><li>Netskills training </li></ul></ul><ul><ul><li>Institutional audit support </li></ul></ul><ul><ul><li>Mailing list </li></ul></ul>Support: JISC Website
  24. 27. Outreach <ul><li>Team </li></ul><ul><ul><li>[email_address] –FE </li></ul></ul><ul><ul><li>[email_address] – Resource Providers </li></ul></ul><ul><ul><li>LSE team – implementation casestudies </li></ul></ul><ul><ul><ul><li>Third party players </li></ul></ul></ul><ul><ul><ul><ul><li>Eduserve </li></ul></ul></ul></ul><ul><ul><ul><ul><li>Kidderminster / Salford </li></ul></ul></ul></ul><ul><ul><ul><ul><li>Others </li></ul></ul></ul></ul><ul><ul><ul><ul><li>UKERNA, NetSkills, </li></ul></ul></ul></ul>
  25. 28. Access Management: Transition Programme Meeting <ul><li>29th - 30th May 2007 </li></ul><ul><li>Aston, Birmingham </li></ul><ul><li>Intended as a discussion platform for those who are adopting, or considering adopting, federated access management within the UK. </li></ul><ul><li>Senior managers, technical and library staff </li></ul><ul><li> </li></ul><ul><li>FREE! </li></ul>LUNCH AND CLOSE 12.30 - 1.30 PLENARY 11.30 - 12.30 Service Provider update Technologies Update Policy Update 10.30 - 11.30 COFFEE BREAK 10.15 - 10.30 FUTURES: FEDERATION / SAML AND JISC STRATEGY 9.15 - 10.15 END OF DAY ONE DRINKS AT 7.30 / DINNER AT 8.00 Library BoF Technical BoF Institutional Audit BoF 4.00 - 5.00 COFFEE BREAK / SUPPLIERS POSTERS 3.30 - 4.00 OPTIONS FOR JOINING THE FEDERATION 2.15 - 3.30 WELCOME 200 - 2.15 LUNCH 1.00 - 2.00
  26. 29. Casestudies
  27. 30. Casestudies
  28. 31. Casestudies
  29. 35.
  30. 36. FEDERATION – does need to be addressed sooner or later Don’t let that happen to your institution Issue not forced on Colleges but highlighted Solutions offered not chosen
  31. 37. Discussion <ul><li>Obstacles? </li></ul><ul><li>Help? </li></ul>