SlideShare a Scribd company logo
The State of the
    Raven
                Jon Warbrick
University of Cambridge Computing Service
              jw35@cam.ac.uk
The State of the Raven




                                           Corvus corax

Raven photo used under the terms of the GNU Free Documentation License. Author Pcb21.
The State of the Raven




      Raven Web Authentication
The State of the Raven

                          2002



   A little history
   December 2002: the CS’s       Oct   Nov   Dec
  SMT approve a proposal for
  a “Central, password-based
  web authentication service”
The State of the Raven

                                   2003
       August 2003:
       “A central web
       authentication system”




     Jan   Feb   Mar   Apr   May   Jun   Jul   Aug   Sep   Oct   Nov   Dec




            First talk to
            Webmasters
The State of the Raven

                                      2004
     January 2004:                                      September 2004:
    Initial implementation                              Raven service
    reported to be                                      launched




     Jan     Feb   Mar   Apr   May   Jun   Jul    Aug    Sep   Oct   Nov   Dec




               “Raven Web     “The Raven Web       “info.raven.
             Authentication”   Authentication     current.status”
           talk to Webmasters      Service”           talk to
                              talk to Techlinks    Webmasters
The State of the Raven

                                   2005
                       October 2005:
                       CamSIS exam entries,
                       and CamCORS adopt
                       Raven authentication




     Jan   Feb   Mar   Apr   May   Jun   Jul   Aug   Sep   Oct   Nov   Dec
The State of the Raven

                                   2006




     Jan   Feb   Mar   Apr   May   Jun   Jul   Aug   Sep   Oct   Nov   Dec
The State of the Raven

                                      2007
                                                              October 2007:
    January 2007:
                                                              Shibboleth IdP
    Plans for a Shibboleth
                                                              service launched; no
    service announced
                                                              new Athens




     Jan   Feb    Mar   Apr   May    Jun    Jul   Aug   Sep    Oct   Nov   Dec




                          “Introducing
                           Shibboleth”
                        talk to Techlinks
The State of the Raven

                                      2008
           July 2008:                                         October 2008:
           UK central funding for                             Raven defaults to
           Athens service stops                               authenticating
                                                              without asking




     Jan     Feb   Mar    Apr   May   Jun   Jul   Aug   Sep    Oct   Nov   Dec
The State of the Raven

                                      2009
                 March 2009:
                 Support for Shib
                 SPs in the




     Jan   Feb     Mar   Apr   May    Jun   Jul   Aug   Sep   Oct   Nov   Dec




                            YOU ARE
                             HERE!!

                                                  The future
The State of the Raven




      30,000


      20,000


      10,000


          0
          Jan 05   Jan 06   Jan 07   Jan 08   Jan 09

        Distinct Raven users per month
The State of the Raven




      600

      450

      300

      150

        0
        Jan 05   Jan 06   Jan 07   Jan 08   Jan 09

        Distinct web servers per month
The State of the Raven




     8,000.000


     5,333.333


     2,666.667


            0
                  Jan 08          Jan 09

         Distinct Shib users per month
The State of the Raven




       60


       40


       20


        0
               Jan 08               Jan 09

            Distinct Shib SPs per month
The State of the Raven


 So, Shibboleth, remind me...


        “The Shibboleth System is a standards
       based, open source software package for
          web single sign-on across or within
      organizational boundaries. It allows sites to
      make informed authorization decisions for
         individual access of protected online
      resources in a privacy-preserving manner.”
                  http://shibboleth.internet2.edu/
                          (emphasis mine)
The State of the Raven


 So, Shibboleth, remind me...

     Standards based, open source software
     package
     For web single sign-on
     Across or within organizational boundaries
     Informed authorization decisions
     Individual access
     Protected online resources
     Privacy-preserving
The State of the Raven


 So, Shibboleth, remind me...

     Components
       Identity Providers (IdPs)
       Service Providers (SPs)
       Discovery Services (DSs)
The State of the Raven


 Some use cases




                  The
               University

          Inside

Outside
The State of the Raven


 E-journals
The State of the Raven


 E-journals
The State of the Raven


 E-journals
The State of the Raven


 Windows IIS 7
The State of the Raven


 Windows IIS 7
The State of the Raven


 Authorization decisions
The State of the Raven


 Authorization decisions


        lookup
The State of the Raven


 Authorization decisions


        lookup




                         X
The State of the Raven


 Authorization decisions


        lookup




                         X
The State of the Raven


 “Other people”
The State of the Raven


 “Other people”
The State of the Raven


 “Other people”
The State of the Raven


 “Other people”
The State of the Raven


 Your own IdP




                         X
The State of the Raven


 Your own IdP




                         X
The State of the Raven


 Existing software
The State of the Raven


 Existing software
The State of the Raven


 Existing software




                         EZproxy
The State of the Raven


 So, how do I do it?

     Install the software
       Installer to Windows (for IIS or Apache)
       Ports-based install for MacOS
       Binary RPMs for SLES10 and CentOS
       (a.k.a. RHEL)
       Source RPMs and source files
The State of the Raven


 So, how do I do it? (2)

     Customize config files (shibboleth2.xml)
     Start Shib daemon, (re-)start Apache
     Test
     Gives you a simple SP protecting /secure/
     by requiring a Raven login
The State of the Raven


 Now what?

     Register your SP?
     Configure access control
     Configure virtual hosts
     Setup SSL?
The State of the Raven


 What’s the catch?

     XML-based config files (even under
     Windows!)
     All that software
     SSL and certificates and stuff
     Need to actually understand virtual hosting
     An extra daemon/process
     Generally more complicated :-((
The State of the Raven


 So how do I cope?

    https://wiki.csx.cam.ac.uk/raven/
    Shibboleth_documentation_and_HOWTOs

 raven-support@ucs.cam.ac.uk

                 cs-raven-discuss@lists.cam.ac.uk

          shibboleth-users@internet2.edu
The State of the Raven


 So how do I cope?
The State of the Raven


 The future



         “Prediction is very hard,
       especially about the future.”

                          Niels Bohr
The State of the Raven


 The future

     Shibboleth 2.0
     More attributes
     Other protocols: OpenID, WS-*, Oauth
     Non-web
     The “Identity Management Working Group”
The State of the Raven


 Thank you for listening




               There may be questions...

             ...including perhaps ‘Why “Shibboleth?”’

More Related Content

Recently uploaded

Mutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented ChatbotsMutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented Chatbots
Pablo Gómez Abajo
 
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
AlexanderRichford
 
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's TipsGetting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
ScyllaDB
 
What is an RPA CoE? Session 2 – CoE Roles
What is an RPA CoE?  Session 2 – CoE RolesWhat is an RPA CoE?  Session 2 – CoE Roles
What is an RPA CoE? Session 2 – CoE Roles
DianaGray10
 
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity serverDandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
Antonios Katsarakis
 
Containers & AI - Beauty and the Beast!?!
Containers & AI - Beauty and the Beast!?!Containers & AI - Beauty and the Beast!?!
Containers & AI - Beauty and the Beast!?!
Tobias Schneck
 
Introducing BoxLang : A new JVM language for productivity and modularity!
Introducing BoxLang : A new JVM language for productivity and modularity!Introducing BoxLang : A new JVM language for productivity and modularity!
Introducing BoxLang : A new JVM language for productivity and modularity!
Ortus Solutions, Corp
 
Principle of conventional tomography-Bibash Shahi ppt..pptx
Principle of conventional tomography-Bibash Shahi ppt..pptxPrinciple of conventional tomography-Bibash Shahi ppt..pptx
Principle of conventional tomography-Bibash Shahi ppt..pptx
BibashShahi
 
AWS Certified Solutions Architect Associate (SAA-C03)
AWS Certified Solutions Architect Associate (SAA-C03)AWS Certified Solutions Architect Associate (SAA-C03)
AWS Certified Solutions Architect Associate (SAA-C03)
HarpalGohil4
 
A Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's ArchitectureA Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's Architecture
ScyllaDB
 
GNSS spoofing via SDR (Criptored Talks 2024)
GNSS spoofing via SDR (Criptored Talks 2024)GNSS spoofing via SDR (Criptored Talks 2024)
GNSS spoofing via SDR (Criptored Talks 2024)
Javier Junquera
 
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
DanBrown980551
 
inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
inQuba Webinar Mastering Customer Journey Management with Dr Graham HillinQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
LizaNolte
 
Christine's Product Research Presentation.pptx
Christine's Product Research Presentation.pptxChristine's Product Research Presentation.pptx
Christine's Product Research Presentation.pptx
christinelarrosa
 
Essentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation ParametersEssentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation Parameters
Safe Software
 
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge GraphGraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
Neo4j
 
QA or the Highway - Component Testing: Bridging the gap between frontend appl...
QA or the Highway - Component Testing: Bridging the gap between frontend appl...QA or the Highway - Component Testing: Bridging the gap between frontend appl...
QA or the Highway - Component Testing: Bridging the gap between frontend appl...
zjhamm304
 
Leveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and StandardsLeveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and Standards
Neo4j
 
Discover the Unseen: Tailored Recommendation of Unwatched Content
Discover the Unseen: Tailored Recommendation of Unwatched ContentDiscover the Unseen: Tailored Recommendation of Unwatched Content
Discover the Unseen: Tailored Recommendation of Unwatched Content
ScyllaDB
 
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeckPoznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
FilipTomaszewski5
 

Recently uploaded (20)

Mutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented ChatbotsMutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented Chatbots
 
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
 
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's TipsGetting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
 
What is an RPA CoE? Session 2 – CoE Roles
What is an RPA CoE?  Session 2 – CoE RolesWhat is an RPA CoE?  Session 2 – CoE Roles
What is an RPA CoE? Session 2 – CoE Roles
 
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity serverDandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
 
Containers & AI - Beauty and the Beast!?!
Containers & AI - Beauty and the Beast!?!Containers & AI - Beauty and the Beast!?!
Containers & AI - Beauty and the Beast!?!
 
Introducing BoxLang : A new JVM language for productivity and modularity!
Introducing BoxLang : A new JVM language for productivity and modularity!Introducing BoxLang : A new JVM language for productivity and modularity!
Introducing BoxLang : A new JVM language for productivity and modularity!
 
Principle of conventional tomography-Bibash Shahi ppt..pptx
Principle of conventional tomography-Bibash Shahi ppt..pptxPrinciple of conventional tomography-Bibash Shahi ppt..pptx
Principle of conventional tomography-Bibash Shahi ppt..pptx
 
AWS Certified Solutions Architect Associate (SAA-C03)
AWS Certified Solutions Architect Associate (SAA-C03)AWS Certified Solutions Architect Associate (SAA-C03)
AWS Certified Solutions Architect Associate (SAA-C03)
 
A Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's ArchitectureA Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's Architecture
 
GNSS spoofing via SDR (Criptored Talks 2024)
GNSS spoofing via SDR (Criptored Talks 2024)GNSS spoofing via SDR (Criptored Talks 2024)
GNSS spoofing via SDR (Criptored Talks 2024)
 
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
 
inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
inQuba Webinar Mastering Customer Journey Management with Dr Graham HillinQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill
 
Christine's Product Research Presentation.pptx
Christine's Product Research Presentation.pptxChristine's Product Research Presentation.pptx
Christine's Product Research Presentation.pptx
 
Essentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation ParametersEssentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation Parameters
 
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge GraphGraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
 
QA or the Highway - Component Testing: Bridging the gap between frontend appl...
QA or the Highway - Component Testing: Bridging the gap between frontend appl...QA or the Highway - Component Testing: Bridging the gap between frontend appl...
QA or the Highway - Component Testing: Bridging the gap between frontend appl...
 
Leveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and StandardsLeveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and Standards
 
Discover the Unseen: Tailored Recommendation of Unwatched Content
Discover the Unseen: Tailored Recommendation of Unwatched ContentDiscover the Unseen: Tailored Recommendation of Unwatched Content
Discover the Unseen: Tailored Recommendation of Unwatched Content
 
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeckPoznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck
 

Featured

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
Marius Sescu
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
Expeed Software
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
marketingartwork
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
Skeleton Technologies
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Neil Kimberley
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Albert Qian
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
Search Engine Journal
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
SpeakerHub
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
Tessa Mero
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Lily Ray
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
Rajiv Jayarajah, MAppComm, ACC
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
Christy Abraham Joy
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
Vit Horky
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
MindGenius
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
RachelPearson36
 

Featured (20)

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 

State of the Raven

  • 1. The State of the Raven Jon Warbrick University of Cambridge Computing Service jw35@cam.ac.uk
  • 2. The State of the Raven Corvus corax Raven photo used under the terms of the GNU Free Documentation License. Author Pcb21.
  • 3. The State of the Raven Raven Web Authentication
  • 4. The State of the Raven 2002 A little history December 2002: the CS’s Oct Nov Dec SMT approve a proposal for a “Central, password-based web authentication service”
  • 5. The State of the Raven 2003 August 2003: “A central web authentication system” Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec First talk to Webmasters
  • 6. The State of the Raven 2004 January 2004: September 2004: Initial implementation Raven service reported to be launched Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec “Raven Web “The Raven Web “info.raven. Authentication” Authentication current.status” talk to Webmasters Service” talk to talk to Techlinks Webmasters
  • 7. The State of the Raven 2005 October 2005: CamSIS exam entries, and CamCORS adopt Raven authentication Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
  • 8. The State of the Raven 2006 Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
  • 9. The State of the Raven 2007 October 2007: January 2007: Shibboleth IdP Plans for a Shibboleth service launched; no service announced new Athens Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec “Introducing Shibboleth” talk to Techlinks
  • 10. The State of the Raven 2008 July 2008: October 2008: UK central funding for Raven defaults to Athens service stops authenticating without asking Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
  • 11. The State of the Raven 2009 March 2009: Support for Shib SPs in the Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec YOU ARE HERE!! The future
  • 12. The State of the Raven 30,000 20,000 10,000 0 Jan 05 Jan 06 Jan 07 Jan 08 Jan 09 Distinct Raven users per month
  • 13. The State of the Raven 600 450 300 150 0 Jan 05 Jan 06 Jan 07 Jan 08 Jan 09 Distinct web servers per month
  • 14. The State of the Raven 8,000.000 5,333.333 2,666.667 0 Jan 08 Jan 09 Distinct Shib users per month
  • 15. The State of the Raven 60 40 20 0 Jan 08 Jan 09 Distinct Shib SPs per month
  • 16. The State of the Raven So, Shibboleth, remind me... “The Shibboleth System is a standards based, open source software package for web single sign-on across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.” http://shibboleth.internet2.edu/ (emphasis mine)
  • 17. The State of the Raven So, Shibboleth, remind me... Standards based, open source software package For web single sign-on Across or within organizational boundaries Informed authorization decisions Individual access Protected online resources Privacy-preserving
  • 18. The State of the Raven So, Shibboleth, remind me... Components Identity Providers (IdPs) Service Providers (SPs) Discovery Services (DSs)
  • 19. The State of the Raven Some use cases The University Inside Outside
  • 20. The State of the Raven E-journals
  • 21. The State of the Raven E-journals
  • 22. The State of the Raven E-journals
  • 23. The State of the Raven Windows IIS 7
  • 24. The State of the Raven Windows IIS 7
  • 25. The State of the Raven Authorization decisions
  • 26. The State of the Raven Authorization decisions lookup
  • 27. The State of the Raven Authorization decisions lookup X
  • 28. The State of the Raven Authorization decisions lookup X
  • 29. The State of the Raven “Other people”
  • 30. The State of the Raven “Other people”
  • 31. The State of the Raven “Other people”
  • 32. The State of the Raven “Other people”
  • 33. The State of the Raven Your own IdP X
  • 34. The State of the Raven Your own IdP X
  • 35. The State of the Raven Existing software
  • 36. The State of the Raven Existing software
  • 37. The State of the Raven Existing software EZproxy
  • 38. The State of the Raven So, how do I do it? Install the software Installer to Windows (for IIS or Apache) Ports-based install for MacOS Binary RPMs for SLES10 and CentOS (a.k.a. RHEL) Source RPMs and source files
  • 39. The State of the Raven So, how do I do it? (2) Customize config files (shibboleth2.xml) Start Shib daemon, (re-)start Apache Test Gives you a simple SP protecting /secure/ by requiring a Raven login
  • 40. The State of the Raven Now what? Register your SP? Configure access control Configure virtual hosts Setup SSL?
  • 41. The State of the Raven What’s the catch? XML-based config files (even under Windows!) All that software SSL and certificates and stuff Need to actually understand virtual hosting An extra daemon/process Generally more complicated :-((
  • 42. The State of the Raven So how do I cope? https://wiki.csx.cam.ac.uk/raven/ Shibboleth_documentation_and_HOWTOs raven-support@ucs.cam.ac.uk cs-raven-discuss@lists.cam.ac.uk shibboleth-users@internet2.edu
  • 43. The State of the Raven So how do I cope?
  • 44. The State of the Raven The future “Prediction is very hard, especially about the future.” Niels Bohr
  • 45. The State of the Raven The future Shibboleth 2.0 More attributes Other protocols: OpenID, WS-*, Oauth Non-web The “Identity Management Working Group”
  • 46. The State of the Raven Thank you for listening There may be questions... ...including perhaps ‘Why “Shibboleth?”’

Editor's Notes

  1. \n
  2. \n
  3. \n
  4. \n
  5. \n
  6. \n
  7. \n
  8. \n
  9. \n
  10. \n
  11. \n
  12. \n
  13. \n
  14. \n
  15. \n
  16. \n
  17. \n
  18. \n
  19. \n
  20. \n
  21. \n
  22. \n
  23. \n
  24. \n
  25. \n
  26. \n
  27. \n
  28. \n
  29. \n
  30. \n
  31. \n
  32. \n
  33. \n
  34. \n
  35. \n
  36. \n
  37. \n
  38. \n
  39. \n
  40. \n