National Science Foundation Office of Information and Resource ManagementDivision of Administrative ServicesDivision of Human Resource ManagementDivision of Information Systems

NSF/InCommon/E-Auth Pilot POC briefing for

Educause PKI Summit

December 14, 2006

National Science Foundation Office of Information and Resource Management Division of Information Systems

2

Who participated

• NSF as a member of the E-Authentication Federation

• GSA as the E-Authentication program managers• University of Washington as a member of the

InCommon Federation• Penn State University as a member of the

InCommon Federation• Stanford University as a member of the

InCommon Federation

National Science Foundation Office of Information and Resource Management Division of Information Systems

3

What the pilot included• Proof of Concept for the Interfed\InCommon

Federations technical capabilities using SAML assertions passed between relying party applications and credential service providers

• Used technical details developed from Interfed\InCommon Technical working group

• NSF’s production FastLane as the relying party application via Sun’s Access Manager product

• Penn State University, Stanford University, and University of Washington’s Shibboleth installations as credential providers

National Science Foundation Office of Information and Resource Management Division of Information Systems

4

Internet2 Presentation• R. L. “Bob” Morgan from the University of Washington gave the

presentation at the Internet 2 Fall Member meeting in Chicago the week December 4th, 2006 at the end of a Teragrid presentation from Charlie Catlett http://events.internet2.edu/2006/fall-mm/sessionDetails.cfm?session=2931

• Kevin Morooney from Penn State and Parvati Dev from Stanford University demonstrated using their campus Shibboleth credentials to log directly into NSF’s production FastLane system

• NSF CIO Dr. George O. Strawn spoke about the benefits of E-Authentication federations

• Georgia K. Marsh, GSA’s deputy Program Manager for E-Authentication, spoke about how federations will benefit all entities that are members of them

• Watch the demo here: http://winmedia.internet2.edu/fmm06-vod/FMM-Primary-120706-2.wmv It starts at the 57 minute point in this presentation

National Science Foundation Office of Information and Resource Management Division of Information Systems

5

Next Steps

• Complete the Interfederation agreements between the E-authentication Federation and the InCommon Federation

• Establish InCommon levels in alignment with E-Auth Assurance Level 1

• Begin new working group to resolve policy issues