Shibboleth Federations and Secure SDI
•Download as PPT, PDF•
0 likes•334 views
The document summarizes a workshop on using Shibboleth federations to securely access spatial data infrastructure (SDI) resources. It describes an interoperability experiment conducted by the Open Geospatial Consortium to test modifying open source clients to access web services secured by Shibboleth. Several organizations demonstrated desktop and browser-based clients accessing web feature and map services hosted in test identity federations. The experiment showed securing SDI resources with Shibboleth is practical and could help address cross-border data sharing challenges.
Recommended
More Related Content
What's hot
What's hot (17)
Viewers also liked
Viewers also liked (19)
Similar to Shibboleth Federations and Secure SDI
Similar to Shibboleth Federations and Secure SDI (20)
More from EDINA, University of Edinburgh
More from EDINA, University of Edinburgh (20)
Recently uploaded
Recently uploaded (20)
Shibboleth Federations and Secure SDI
- 1. WORKSHOP: Shibboleth Federations and Secure SDI: Outcomes and Demonstrations from the OGC Web Service Shibboleth Interoperability Experiment Chris Higgins, IE Manager , EDINA National Datacentre, University of Edinburgh, Scotland INSPIRE Conference 2011, Monday 27 th June
- 2. Workshop Agenda Questions and concluding remarks 1710-1730 4 Demonstration of software working with the test Federation 1640-1710 3 Member States investigating use of Shibb for their NSDI’s 1620-1640 2 Introduction 1600-1620 1 Topic Time
- 4. ESDIN project info (www.esdin.eu) Interactive Instruments Bundesamt für Kartographie und Geodäsie Lantmäteriet National Technical University of Athens IGN Belgium Bundesamt für Eich- und Vermessungswesen Universität Münster EDINA, University Edinburgh National Agency for Cadastre and Real Estate Publicity Romania Helsinki University of Technology IGN France Kadaster Kort & Matrikelstyrelsen Geodan Software Development & Technology 1Spatial The Finnish Geodetic Institute National Land Survey of Finland Institute of Geodesy, Cartography and Remote Sensing Statens kartverk EuroGeographics
- 10. SP SP SP SP SP SP SP SP SP SP SP Coordinating Centre Federation Service Providers Identity Providers Users Organisations SP SP SP Authenticates here IdP IdP IdP IdP IdP
- 15. Who modified what X X Proxy X X Browser X X X X Desktop X X X X WFS X X X X X WMS Envitia JRC (open source) con terra Cadcorp Snowflake EDINA (open source) Organisation Name Type of Client
- 19. INSPIRE Federation OWS Providers Member State organisations, eg, NMCAs WMS Key organisations, eg. EEA, JRC WMS WMS WMS WMS WMS WFS WFS WFS WFS WFS WFS IdP IdP IdP IdP IdP IdP Coordinating Centre
- 21. All material will be available from: http://igibs.blogs.edina.ac.uk/inspire2011/ Comments, questions, suggestions, etc, on blog very welcome Or email: [email_address]
- 22. Workshop Agenda Questions and concluding remarks 1710-1730 4 Demonstration of software working with the test Federation 1640-1710 3 Member States investigating use of Shibb for their NSDI’s 1620-1640 2 Introduction 1600-1620 1 Topic Time
Editor's Notes
- Refer to other 7 ESDIN presentations during the conference. Most Weds/Thurs, but also Antti on Fri
- A good example of how EU funded projects might interact with the OGC Mention that the main use case is Key Users accessing pan-European large scale reference data from NMCA’s
- Cannot assume all in audience know about Shibb Mostly in the academic sector Identity protected Millions of users Talk a bit about the ESDIN Federation
- Even if all open (free of charge online access) often still need to know who is accessing the data And some data will never be completely open due to personal privacy issues, eg, cadastral parcels?
- Cannot assume all in audience know about Shibb Mostly in the academic sector Identity protected Millions of users Used throughout the world Australian Access Federation Talk a bit about the ESDIN Federation
- This diagram adapted from the Switch website
- Mention have not talked about SAML. Refer to INSPIRE paper
- Check this table Check with Andrew if he remembers who did what
- Technically doable, now move on
- Access Management Federations (AMF) provide a practical organisational model for operational SDI Shibboleth is production strength Small centre, big network of organisations A fundamental SDI requirement demonstrated Additional SDI organisational requirements could be layered on top of the AMF, eg, governance Needs changes to the clients, but not the services or Shibboleth Potential INSPIRE compliant approach for establishing operational strength access control to ensure data provided is only available to legitimate government agencies!