Sustainability in Federated Identity Services - Global and Local

Transcription

1 Sustainability in Federated Identity Services - Global and Local What works and what doesn t with eduroam and edugain Ann Activity Lead, Trust & Identity Development, GÉANT Person who Asks Uncomfortable Questions, SWITCH I2 Global Summit April 2017

2 Finding the magic function ScaleGlobalService () { global $UseCases; global $TechGlue; //TODO Magic Goes Here echo $DeclareVictory; } $DeclareVictory = true; 2

3 Two Globally Scaled Services, Two Paths to Success 10+ Years old, 70+ countries, tens of thousands of sites One service network access WIFI dominated, fix tech possible Service visible to users Global eduroam Governance Committee (GeGC) Nominated by confederations Sets technical and organisational standards for the service Secretariat funded from GÉANT Assoc. general costs, ETLRS via GÉANT Project 5+ Years old 48 countries, 2k+ IdPs, nearly 1.5k services Service is metadata exchange Not visible to users User visible service is Web SSO edugain SG and edugain Executive Each member has 2x SG reps GÉANT Board is the Executive 100% funded via GÉANT Project Mechanisms SG sets technical and operational standards 3

4 From local ideas to global service eduroam evolution.nl.by.cz.ca.dk.fi.hr.be.gr.hk.is.pl.by.sa.mx.ie.jp.se 4

5 From local service to global service edugain evolution 5

6 Quiz time! Who delivers these services? 6

7 Why does that matter? 7

8 Scaling Globally is Obeying the Invisible Rules of Irrationality There are many examples to show that people will work more for a cause than for cash. MONEY, AS IT turns out, is very often the most expensive way to motivate people. Social norms are not only cheaper, but often more effective as well. If you're a company, my advice is to remember that you can't have it both ways. You can t treat your customers like family one moment and then treat them impersonally or, even worse, as a nuisance or a competitor a moment later when this becomes more convenient or profitable. Dan Ariely, Predictably Irrational: The Hidden Forces That Shape Our Decisions 8

9 Enlightened self interest 9

10 Beating The Limitations of Success eduroam s roadmap Community ideas go here eduroam CAT transformed the deployability of eduroam on user devices A little centralisation is a good thing Built in f-ticks monitoring and aggregation early silver bullet to enable campus & SP infrastructure CAT++ for end user device diagnostics 10

11 Beating The Limitations of Success edugain s roadmap Beyond the baseline: CoCo & R&S Support Federations to Support Campus Next Generation Architectures and Protocols Beyond the baseline: SIRTFI & MFA Robustness of Operations Support for Federations: FaaS Federation coverage Entity coverage 11

12 Two evolutions in sustainability AAI as a Service for Collaborative organisations Expanding to serve other sectors without disrupting sustainability for existing users InAcademia Simple affiliation validation as a Service Monetising the advantages we have 12

13 Science requirements The Network View Class A) are the typical home users Class B) consists of the corporations, enterprises, Universities, virtual organisations and laboratories. Class C) are the really high end applications Science means big data Adapted from The Rationale of Optical Networking, Cees de Laat, Erik Radius, Steven Wallace (c2002) 13

14 Science Requirements - the Trust and Identity View Class A) are the simple library/journal/learnin g applications Services in edugain 350 Class B) consists of the campus corporate infrastructure Class C) are the really complex trust applications for collaboration and eresearch Library & Journals Teaching & Learning Campus Infrastructure Other Cloud Service Collaboration Platform Research Service Science means big collaboration Complexity 14

15 Science DMZ, the Trust and Identity View Design pattern 1: Enable your collaboration flows Export IdPs to edugain Export eresearch SPs to edugain Design pattern 2: Unclog your policy taps For hub and spoke do you need the same policies for your C users as for your a and B? Can you be more flexible? For full mesh do you need to leave everything to the edges? Can you use your resource registry/central tools to apply policy for e- Research more scalably? Pragmatic assurance Design pattern 3: Build a well trusted end to end infrastructure Use Research and Scholarship and GÉANT Code of Conduct Entity Categories to make trust scale beyond your federation Adopt SIRTFI incident response framework to build trust Adopt group and attribute management services e.g. VO Platform 15

16 InAcademia - a Simple validation Service InAcademia leverages existing edugain infrastructure for Institutions, while at the same time radically simplifies affiliation validation for services Microsoft wants to offer free Office365 to all students in EU ORCID seeks to improve account quality SMEs want low barriers for leveraging digital academic Identity: a simple contract, a predictable cost model and high assurance on identity

17 InAcademia DEMO

18 InAcademia the concept Customer Values Query a single, centralised service to confirm affiliation Validation service accessible for all edugain IdPs A simple protocol is used by the Services (OpenID Connect) Single contract policy Community Values Minimal exchange of personal data never passed to the SP from the InAcademia service Acts as a normal SP towards the IdP Enables lower trust usage of information without lowering overall trust Sustainability SP pays a small per transaction fee for the validation Revenues are sustainably and fairly distributed Support operations for InAcademia & edugain Provide an innovation fund for Open Calls Kickback to organisations providing validations

19 What is the magic for sustainability? Unify genuine use cases Scale cheaply by bringing in infrastructure from many parties Design fairness Build trust to help you overcome your limitations Not so abstract that you will need 38 ways to implement, even if you leave it free as a theoretical possibility Respect the advantages of social contract and understand where they outweigh the certainty of financial contract Balance the pain points within the different stakeholders of the infrastructure Understand what is important to participants and preserve it We as NRENS are proud and fiercely protective of our reputations No amount of technical trust or governance tweaking will make you be able to go further than you are trusted 19

20 Thank you This work is part of a project that has received funding from the European Union s Horizon 2020 research and innovation programme under Grant Agreement No (GN4-1). 20