15
LITTLE RED RIDING HOOD AND THE FEDERATED IDENTITY PROVIDER

Little Red Riding Hood and the Federated IdP

  • Upload
    eduserv

  • View
    1.365

  • Download
    3

Embed Size (px)

Citation preview

Page 1: Little Red Riding Hood and the Federated IdP

LITTLE RED RIDING HOOD AND THE FEDERATED IDENTITY

PROVIDER

Page 2: Little Red Riding Hood and the Federated IdP
Page 3: Little Red Riding Hood and the Federated IdP

NARRATIVE ANALYSIS OF RED RIDING HOOD – OPENING

SECTION

Red Riding Hood

Food

Wolf

Grandma

Cuteness

Mother

Scanned by NobbiP, via Wikimedia Commons

Page 4: Little Red Riding Hood and the Federated IdP

Agent

Object

Adversary

Receiver

Helper

Sender

Narrative Analysis of a folktale via Vladimir Propp

Photo used under Creative Commons from Stevecadman via Flickr

Page 5: Little Red Riding Hood and the Federated IdP

Library

Login details

Wolf?

Protected electronic resources

Open Athens

MD

University

Narrative Analysis of current authentication arrangements

Photo used under Creative Commons from Stevecadman via Flickr

Page 6: Little Red Riding Hood and the Federated IdP

HOW MUCH IS AT STAKE HERE?

• 27000 Athens users• £875000 annual spend on electronic

resources• A lot of annoyed people, with good

reason, if the authentication service breaks down

Page 7: Little Red Riding Hood and the Federated IdP

OPENATHENS MD AS A HELPER

We have been using this for years

We have routines for administering and supporting the service

It works for Athens and UK federation authenticated resources

We get usage statistics for logins

Scanned by NobbiP, via Wikimedia Commons

Page 8: Little Red Riding Hood and the Federated IdP

Photo used under Creative Commons from Fremlin via Flickr

What is wrong with current set-up?

Students forget passwords

Password reset does not match email aliases

Some account details never delivered

Students leave, interrupt or extend their studies

Use of resources may be lowered by password problems

How can we identify current staff members?

Page 9: Little Red Riding Hood and the Federated IdP

What are we trying to deliver?

Easy for students to use;

Tied in with University membership;

Abiding by access regulations;

Access wide range of electronic services;

No more information revealed than necessary.

Photo used under Creative Commons from Ewlas via Flickr

Page 10: Little Red Riding Hood and the Federated IdP

Will Shibboleth help?

Library

ISAS

Login details

Wolf?

Protected electronic resources

Shibboleth

University

Photo used under Creative Commons from Stevecadman via Flickr

Page 11: Little Red Riding Hood and the Federated IdP

Shibboleth and the wolves

Locally slow development of Shibboleth

Not all subscribed resources are members of UK federation

Photo used under Creative Commons from Dennis from Atlanta via Flickr

Page 12: Little Red Riding Hood and the Federated IdP

OPENATHENS LA AS A HELPER

Familiar login details;

Existing password reset page;

Usable interface for categories and attributes;

Integrates with University database for staff and students;

Can still use OpenAthens MD for ‘special cases’;

Usage statistics for logins to different resources.

Scanned by NobbiP, via Wikimedia Commons

Page 13: Little Red Riding Hood and the Federated IdP

How about OpenAthens LA?OpenAthens LA and the wolves

Wait for version upgrade close to meeting our needs

Need to set up application ourselves

Need to understand authentication terminology

Need a Service Level Agreement with local LDAP provider

Photo used under Creative Commons from Dennis from Atlanta via Flickr

Page 14: Little Red Riding Hood and the Federated IdP

Progress at De Montfort University

Start mid-2010

UK Access Management Federation registration in December 2010 in hidden mode

Testing authentication and authorisation Jan 2011

Investigating enhancing LDAP data

Re-organisation of IT staff out of Library and into University Central Services department: Feb. 2011

Photo used under Creative Commons from Stevecadman via Flickr

Page 15: Little Red Riding Hood and the Federated IdP

ON THE ‘TO DO’ LIST

By Scanned by NobbiP, via Wikimedia Commons

More testing

Develop launch strategy

Integrate with teaching and support in Library

Explain changes to Faculties

Investigate OpenID, OpenAthens SP

Tame Wolves, make into Helpers