SURFconext
and Mobile
Boy Baukema, Ibuildings.nl
Boy Baukema
Senior Software Engineer @ Ibuildings.nl
Core SURFconext dev
What’s to come
● What is SURFconext?
● Let’s see the problem it solves
● Solving Identity issues with SAML2
● Securing your API with OAuth2
SURFconext is...
… a way to instantly get access to 1.000.000
potential users
… a way to instantly gain access for your users
to 100+ services
… a way to quickly allow guest access or
cooperation with other institutions
An example...

Scheduling
Then came mobile

Scheduling
Mobile

Scheduling
We’re not a one stop shop

Scheduling
Mobile

Scheduling
users

Grades
users
Sharing is caring

Scheduling
Mobile

Scheduling

Grades

users
Then came the cloud...

Google
Apps
users
Scheduling
Mobile

Scheduling

Grades

Box
users
Liferay

users

users
And third party apps...
Scheduling
Android
Google
Apps
users
Scheduling
Mobile

Scheduling

Grades

Box
users
Liferay

users

users
And aliens!
Scheduling
Android
Google
Apps
users
Scheduling
Mobile

Scheduling

Grades

Box
users
Liferay

users

users
ACCOUNTS

ACCOUNTS EVERYWHERE
Enter SAML2 Web SSO

Server Provider

Identity Provider
SAMLized
Scheduling
Android
Google
Apps
Scheduling
Mobile

Grades

Identity
Provider
Box
users

Scheduling

Liferay
Enter SURFconext
Scheduling

Scheduling
Mobile

Scheduling
Android
Google
Google
Apps
Google
Apps
Apps

Identity
Provider

Box
Box
Box

users

Liferay
Liferay
Liferay

Grades
Identity
Identity
Provider
Provider

Identity
So how about them third party apps

Scheduling
Mobile
username &
password

Scheduling
username &
password

Scheduling
Android
username &
password
Enter OAuth2
A delicate dance
What this means in our case

Scheduling
Android

Scheduling
Mobile

Resource
Server

AuthN
Server

Identity
Provider

Scheduling
username &
password
That’s just the beginning...
●
●
●
●
●
●

Virtual Organizations
Transparent Login
api.surfconext.nl
Sharing group information
OpenSocial
…
Questions?

SURFconext and Mobile