OGC Web Service Shibboleth Interoperability Experiment
•Download as PPT, PDF•
0 likes•836 views
- The document summarizes a workshop about using Shibboleth federations to securely access spatial data infrastructure (SDI) resources through web services. - An interoperability experiment was conducted where several organizations modified their web service client software to work with Shibboleth single sign-on across administrative domains. - The experiment demonstrated that using Shibboleth to securely access web feature and map services through single sign-on is practical and does not require major software changes. This could help address interoperability barriers for cross-border applications needing to access protected spatial resources.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to OGC Web Service Shibboleth Interoperability Experiment
Similar to OGC Web Service Shibboleth Interoperability Experiment (20)
More from EDINA, University of Edinburgh
More from EDINA, University of Edinburgh (20)
Recently uploaded
Recently uploaded (20)
OGC Web Service Shibboleth Interoperability Experiment
- 1. WORKSHOP: Shibboleth Federations and Secure SDI: Outcomes and Demonstrations from the OGC Web Service Shibboleth Interoperability Experiment Chris Higgins, IE Manager , EDINA National Datacentre, University of Edinburgh, Scotland INSPIRE Conference 2011, Monday 27 th June
- 2. Workshop Agenda Questions and concluding remarks 1710-1730 4 Demonstration of software working with the test Federation 1640-1710 3 Member States investigating use of Shibb for their NSDI’s 1620-1640 2 Introduction 1600-1620 1 Topic Time
- 4. ESDIN project info (www.esdin.eu) Interactive Instruments Bundesamt für Kartographie und Geodäsie Lantmäteriet National Technical University of Athens IGN Belgium Bundesamt für Eich- und Vermessungswesen Universität Münster EDINA, University Edinburgh National Agency for Cadastre and Real Estate Publicity Romania Helsinki University of Technology IGN France Kadaster Kort & Matrikelstyrelsen Geodan Software Development & Technology 1Spatial The Finnish Geodetic Institute National Land Survey of Finland Institute of Geodesy, Cartography and Remote Sensing Statens kartverk EuroGeographics
- 10. SP SP SP SP SP SP SP SP SP SP SP Coordinating Centre Federation Service Providers Identity Providers Users Organisations SP SP SP Authenticates here IdP IdP IdP IdP IdP
- 15. Who modified what X X Proxy X X Browser X X X X Desktop X X X X WFS X X X X X WMS Envitia JRC (open source) con terra Cadcorp Snowflake EDINA (open source) Organisation Name Type of Client
- 19. INSPIRE Federation OWS Providers Member State organisations, eg, NMCAs WMS Key organisations, eg. EEA, JRC WMS WMS WMS WMS WMS WFS WFS WFS WFS WFS WFS IdP IdP IdP IdP IdP IdP Coordinating Centre
- 21. All material will be available from: http://igibs.blogs.edina.ac.uk/inspire2011/ Comments, questions, suggestions, etc, on blog very welcome Or email: [email_address]
- 22. Workshop Agenda Questions and concluding remarks 1710-1730 4 Demonstration of software working with the test Federation 1640-1710 3 Member States investigating use of Shibb for their NSDI’s 1620-1640 2 Introduction 1600-1620 1 Topic Time
Editor's Notes
- Refer to other 7 ESDIN presentations during the conference. Most Weds/Thurs, but also Antti on Fri
- A good example of how EU funded projects might interact with the OGC Mention that the main use case is Key Users accessing pan-European large scale reference data from NMCA’s
- Cannot assume all in audience know about Shibb Mostly in the academic sector Identity protected Millions of users Talk a bit about the ESDIN Federation
- Even if all open (free of charge online access) often still need to know who is accessing the data And some data will never be completely open due to personal privacy issues, eg, cadastral parcels?
- Cannot assume all in audience know about Shibb Mostly in the academic sector Identity protected Millions of users Used throughout the world Australian Access Federation Talk a bit about the ESDIN Federation
- This diagram adapted from the Switch website
- Mention have not talked about SAML. Refer to INSPIRE paper
- Check this table Check with Andrew if he remembers who did what
- Technically doable, now move on
- Access Management Federations (AMF) provide a practical organisational model for operational SDI Shibboleth is production strength Small centre, big network of organisations A fundamental SDI requirement demonstrated Additional SDI organisational requirements could be layered on top of the AMF, eg, governance Needs changes to the clients, but not the services or Shibboleth Potential INSPIRE compliant approach for establishing operational strength access control to ensure data provided is only available to legitimate government agencies!