Higher Education external Attribute Authority. Mihály Héder István Tétényi (MTA SZTAKI) 19-May-2015
|
|
|
- Barbara Scarlett Reed
- 6 years ago
- Views:
Transcription
1 Higher Education external Attribute Authority Mihály Héder István Tétényi (MTA SZTAKI) 19-May-2015
2 Problems in Collaboration
3 Problems in Collaboration
4 Problems in Collaboration
5 Why we need Attribute Authorities? Motivations for HEXAA SP s attribute requirements grow but the IdPs capabilities are constrained and differ in terms of Procedures Bureaucracy Scope Flexibility Authority
6 Why we need Attribute Authorities? Motivations for HEXAA It is possible to outsource some of the administrative burden of the IdPs in federation External Attribute Provider (EAP)/ Attribute Authority (AA) Separation of AuthN and AuthZ Delegating AuthZ in the hands of the community Providing additional profile attributes e.g. ORCID, X.509 cert, , etc. Manage attributes where it is least cumbersome and fits best At virtual organizations by VO managers By the users themselves who knows always best
7 Why we need Attribute Authorities? Motivations for HEXAA AA is a focal point for provisioning services in a federation by keeping attributes Consistent Coherent Consolidated and centralized in an independent place
8 HEXAA Project Use case discovery User survey User community requirement assessment Legal research/study Common guidelines for AA software developers HEXAA software development HEXAA dissemination
9 HEXAA results Research on the Legal Framework Generic guidelines: EAP shall manage Level of Assurance/Level of Confidence (LOA/LOC). EAP shall manage Consents. Users should be able to: prohibit release, revoke attributes, self-delete. Users should be able to see their attribute release history. The requirements analyses and the development were carried out hand-in-hand.
10 HEXAA results Software development core functionality HEXAA core functionality in a nutshell: Virtual Organization manager Profile Attribute manager Data protection by design Consent Data expiration Regular data re-checks API call separated SAML frontend and back-end 3rd party GUI is an option User profile attributes SAML Attribute Authority HEXAA API VO management Integration plugins Consent
11 HEXAA results Software development - HEXAA architecture
12 HEXAA results Software development - HEXAA architecture
13 HEXAA results Software development - integration SimpleSamlPHP modules AA provider and consumer Specific integration plugins Liferay (WS-Pgrade/gUSE Portal), Drupal (e-science gateways) OpenNebula ( ), OpenStack (juno) (clouds) edujabber, Racktables, MediaWiki Hungarian NREN (NIIFI) HPC portal, custom apps through API Software development results available from GitHub with Apache licence
14 HEXAA results Software development - integration SimpleSamlPHP modules AA provider and consumer Specific integration plugins Liferay (WS-Pgrade/gUSE SSP Portal), Drupal (e-science gateways) OpenNebula ( ), OpenStack (juno) (clouds) edujabber, Racktables, MediaWiki Hungarian NREN (NIIFI) HPC portal, custom apps through API.. Liferay Software development results available from GitHub with Apache licence
15 HEXAA results HEXAA and e-science environments Apache Web Server Shibboleth SAML federation SAML IdP SAML Authentication Liferay portal Liferay SSO plugin Community specific user environments User provisioning and update SAML Attribute Query guse/ws-pgrade Science Gateway Community specific attributes Community specific software deployments Authentication by federation (edugain, eduid,..) Authorization and profile Attributes by HEXAA Standard based (SAML2) interworking using SAML Attribute Request European Grid Federated Cloud
16 HEXAA results HEXAA and Cloud services Apache Web Server Shibboleth SAML federation SAML IdP SAML Authentication OpenNebula web access OpenNebula plugin User provisioning and update SAML Attribute Query OpenNebula service Community specific attributes Authentication by federation (edugain, eduid,..) Authorization and profile Attributes by HEXAA Standard based (SAML2) interworking using SAML Attribute Request Openstack uses the same operational model
17 HEXAA and Openstack
18 HEXAA and Openstack
19 HEXAA and Openstack
20 HEXAA and Openstack The plugin is availabe on GitHub!
21 edujabber example
22 edujabber example
23 edujabber example
24 Plans Sustainability- Collaboration Plans: Several ideas to extend features (VOOT, SCIM, etc.) Interworking with other AA-s Perun, Unity, OpenConext Collaborating in large scale projects AARC, MAGIC, EGI Sustainability: edugain integration Any edugain member is able to use it Eduid.hu NIIFI/Hungarnet operationally secures HEXAA final version Community support
25 HEXAA overall status HEXAA is fully functional, demonstrated at November 2014 Demos are available at: hexaa.eduid.hu is fully integrated into Hungarian identity federation and since May-2015 also in edugain e-science gateway /guse-ws-pgrade/ operational Institutional OpenNebula cloud operational OpenStack Juno plugin operational Kilo underway NIIFI NREN HPC portal is operational edugain integration DONE HEXAA software modules and plugins are available at GitHub
26 The HEXAA team greets you!
27 Thank you and any questions? Hello! You can add your own text here
Open Call Deliverable OCK-DS1.1 Final Report (HEXAA)
31-03-2013 Open Call Deliverable OCK-DS1.1 Final Report (HEXAA) Open Call Deliverable OCK-DS1.1 Grant Agreement No.: 605243 Activity: NA1 Task Item: 10 Nature of Deliverable: R (Report) Dissemination Level:
The EGI AAI CheckIn Service
The EGI AAI CheckIn Service Kostas Koumantaros- GRNET On behalf of EGI-Engage JRA1.1 www.egi.eu EGI-Engage is co-funded by the Horizon 2020 Framework Programme of the European Union under grant number
AARC Blueprint Architecture
AARC Blueprint Architecture Published Date: 18-04-2017 Revision: 1.0 Work Package: Document Code: Document URL: JRA1 AARC-BPA-2017 https://aarc-project.eu/blueprint-architecture AARC Blueprint Architecture
RCauth.eu / MasterPortal update
RCauth.eu / MasterPortal update Mischa Sallé msalle@nikhef.nl 5 th AARC face-to-face meeting, Aθηνα 21 March 2017 Mischa Sallé (Nikhef) 1 / 11 Reminder of motivation Access to X.509 resources made easy
Deliverable D14.1 (DJ3.0.1) Report on the Achievements and Recommendations for any Future Work
05-05-2015 (Identity and Trust Technologies for GÉANT Services) Contractual Date: 27-02-2015 Actual Date: 05-05-2015 Grant Agreement No.: 605243 Activity: JRA3 Task Item: Tasks 1 & 2 Nature of Deliverable:
WP JRA1: Architectures for an integrated and interoperable AAI
Authentication and Authorisation for Research and Collaboration WP JRA1: Architectures for an integrated and interoperable AAI Christos Kanellopoulos Agenda Structure and administrative matters Objectives
2. HDF AAI Meeting -- Demo Slides
2. HDF AAI Meeting -- Demo Slides Steinbuch Centre for Computing Marcus Hardt KIT University of the State of Baden-Wuerttemberg and National Research Center of the Helmholtz Association www.kit.edu Introduction
Workflow applications on EGI with WS-PGRADE. Peter Kacsuk and Zoltan Farkas MTA SZTAKI
applications on EGI with WS-PGRADE Peter Kacsuk and Zoltan Farkas MTA SZTAKI kacsuk@sztaki.hu 1 WS-PGRADE/gUSE Generic-purpose gateway framework Based on Liferay General purpose -oriented gateway framework
Authentication & Authorization systems developed for CTA
Authentication & Authorization systems developed for CTA Mathieu Servillat Observatoire de Paris Paris Astronomical Data Centre IVOA Cape Town meeting 1 Context: the CTA Science Gateway @ David Sanchez,
Moonshot. Workshop on Federated Identity and (OpenStack) Cloud Services - SWITCH
Moonshot Workshop on Federated Identity and (OpenStack) Cloud Services - SWITCH 2 ABFAB - Federated access beyond web Why?» You ve heard of eduroam Federated network access» You ve heard of Shibboleth,
EGI Check-in service. Secure and user-friendly federated authentication and authorisation
EGI Check-in service Secure and user-friendly federated authentication and authorisation EGI Check-in Secure and user-friendly federated authentication and authorisation Check-in provides a reliable and
Deliverable DSA1.4: Pilots to improve access to R&E-relevant resources
07-05-2017 : Deliverable: DSA1.4 Contractual Date: 31-03-2017 Actual Date: 07-05-2017 Grant Agreement No.: 653965 Work Package: SA1 Task Item: Task 3 Lead Partner: PSNC Document Code: DSA1.4 Authors: M.
INDIGO AAI An overview and status update!
RIA-653549 INDIGO DataCloud INDIGO AAI An overview and status update! Andrea Ceccanti (INFN) on behalf of the INDIGO AAI Task Force! indigo-aai-tf@lists.indigo-datacloud.org INDIGO Datacloud An H2020 project
FeduShare Update. AuthNZ the SAML way for VOs
FeduShare Update AuthNZ the SAML way for VOs FeduShare Goals: Provide transparent sharing of campus resources in support of (multiinstitutional) collaboration Support both HTTP and non-web access using
Chapter 2 Introduction to the WS-PGRADE/gUSE Science Gateway Framework
Chapter 2 Introduction to the WS-PGRADE/gUSE Science Gateway Framework Tibor Gottdank Abstract WS-PGRADE/gUSE is a gateway framework that offers a set of highlevel grid and cloud services by which interoperation
EGI AAI Platform Architecture and Roadmap
EGI AAI Platform Architecture and Roadmap Christos Kanellopoulos - GRNET Nicolas Liampotis - GRNET On behalf of EGI-Engage JRA1.1 www.egi.eu EGI-Engage is co-funded by the Horizon 2020 Framework Programme
EGI-InSPIRE. Cloud Services. Steven Newhouse, EGI.eu Director. 23/05/2011 Cloud Services - ASPIRE - May EGI-InSPIRE RI
EGI-InSPIRE Cloud Services Steven Newhouse, EGI.eu Director 23/05/2011 Cloud Services - ASPIRE - May 2011 1 Definition of the cloud Cloud computing is a model for enabling convenient, on-demand network
Federated access to e-infrastructures worldwide
Federated access to e-infrastructures worldwide Marco Fargetta, INFN Catania - Italy (marco.fargetta@ct.infn.it) DCIs developed in the last decade 2 Evolution Research organisations are moving to cloud
DARIAH-AAI. DASISH AAI Meeting. Nijmegen, March 9th,
DARIAH-AAI DASISH AAI Meeting Nijmegen, March 9th, 2014 www.dariah.eu What is DARIAH? DARIAH: Digital Research Infrastructure for the Arts and Humanities One of the few ESFRI research infrastructures for
GN2 JRA5: Roaming and Authorisation
GN2 JRA5: Roaming and Authorisation Jürgen Rauschenbach, DFN TF-NGN Athens 03/11/05 Introduction JRA5 builds a European Roaming Infrastructure (eduroamng) taking into account existing experience from the
Coupled Computing and Data Analytics to support Science EGI Viewpoint Yannick Legré, EGI.eu Director
Coupled Computing and Data Analytics to support Science EGI Viewpoint Yannick Legré, EGI.eu Director yannick.legre@egi.eu Credit slides: T. Ferrari www.egi.eu This work by EGI.eu is licensed under a Creative
DARIAH Update. 9th FIM4R Workshop. Vienna, Novemer 30, Peter Gietz, DAASI International GmbH.
DARIAH Update 9th FIM4R Workshop Vienna, Novemer 30, 2015 Peter Gietz, DAASI International GmbH www.dariah.eu What is DARIAH? DARIAH: Digital Research Infrastructure for the Arts and Humanities One of
GÉANT Community Programme
GÉANT Community Programme Building the community Klaas Wierenga Chief Community Support Officer GÉANT Information day, Tirana, 5 th April 1 Membership Association = very large community to serve GÉANT
Guidelines on non-browser access
Published Date: 13-06-2017 Revision: 1.0 Work Package: Document Code: Document URL: JRA1 AARC-JRA1.4F https://aarc-project.eu/wp-content/uploads/2017/03/aarc-jra1.4f.pdf 1 Table of Contents 1 Introduction
Greek Research and Technology Network. Authentication & Authorization Infrastructure. Faidon Liambotis. grnet
Greek Research and Technology Network Authentication & Authorization Infrastructure Faidon Liambotis faidon@.gr Networking Research and Education February 22 nd, 2011 1 Who am I? Servers & Services Engineer,
AAI in EGI Current status
AAI in EGI Current status Peter Solagna EGI.eu Operations Manager www.egi.eu EGI-Engage is co-funded by the Horizon 2020 Framework Programme of the European Union under grant number 654142 User authentication
Pilots to support guest users solutions
08-12-2016 Deliverable DSA1.1 Contractual Date: 31-07-2016 Actual Date: 08-12-2016 Grant Agreement No.: 653965 Work Package: SA1 Task Item: SA1.1 Pilot on Guest Identities Partner: GARR Document Code:
Introduction of Identity & Access Management Federation. Motonori Nakamura, NII Japan
Introduction of Identity & Access Management Federation Motonori Nakamura, NII Japan } IP networking } The network enables a variety type of attractive applications } Communication E-mail Video conferencing
Liferay Security Features Overview. How Liferay Approaches Security
Liferay Security Features Overview How Liferay Approaches Security Table of Contents Executive Summary.......................................... 1 Transport Security............................................
INDIGO-DataCloud Architectural Overview
INDIGO-DataCloud Architectural Overview RIA-653549 Giacinto Donvito (INFN) INDIGO-DataCloud Technical Director 1 st INDIGO-DataCloud Periodic Review Bologna, 7-8 November 2016 Outline General approach
Now SAML takes it all:
Now SAML takes it all: Federation of non Web-based Services in the State of Baden-Württemberg Sebastian Labitzke Karlsruhe Institute of Technology (KIT) Steinbuch Centre for Computing (SCC) labitzke@kit.edu
Federated Authentication with Web Services Clients
Federated Authentication with Web Services Clients in the context of SAML based AAI federations Thomas Lenggenhager thomas.lenggenhager@switch.ch Mannheim, 8. March 2011 Overview SAML n-tier Delegation
Warm Up to Identity Protocol Soup
Warm Up to Identity Protocol Soup David Waite Principal Technical Architect 1 Topics What is Digital Identity? What are the different technologies? How are they useful? Where is this space going? 2 Digital
Beyond X.509: Token-based Authentication and Authorization with the INDIGO Identity and Access Management Service
Beyond X.509: Token-based Authentication and Authorization with the INDIGO Identity and Access Management Service Andrea Ceccanti andrea.ceccanti@cnaf.infn.it Workshop CCR Rimini, June 12th 2018 INDIGO
EUDAT - Open Data Services for Research
EUDAT - Open Data Services for Research Johannes Reetz EUDAT operations Max Planck Computing & Data Centre Science Operations Workshop 2015 ESO, Garching 24-27th November 2015 EUDAT receives funding from
One small step for the Shib admin, one giant leap for the SAML community?
One small step for the Shib admin, one giant leap for the SAML community? Some Shibboleth migration tales and recommendations Lukas Hämmerle lukas.haemmerle@switch.ch Budapest, 18. November 2009 June 30th
FEDERATED IDENTITY AT ARGONNE NATIONAL LABORATORY
drhgfdjhngngfmhgmghmghjmghfmf NLIT 2018 FEDERATED IDENTITY AT ARGONNE NATIONAL LABORATORY PETE FRIEDMAN Enterprise Architect Business and Information Services (BIS) Argonne National Laboratory ABOUT THE
2010 Kerberos Conference
2010 Kerberos Conference MIT, Cambridge 26-27 October, 2010 Josh Howlett, Strategic Projects Leader, JANET(UK) & Sam Hartman, Painless Security LLC Contents Background Use-cases Brief overview of architecture
WSO2 Identity Management
WSO2 Identity Management Panagiotis Kranidiotis panagiotiskranidiotis@gmailcom 4 Νοεμβρίου 2017 Few things about me First engagement with open source technologies in 1995 Open source consultant and systems
Integration of the guse/ws-pgrade and InSilicoLab portals with DIRAC
Journal of Physics: Conference Series Integration of the guse/ws-pgrade and InSilicoLab portals with DIRAC To cite this article: A Puig Navarro et al 2012 J. Phys.: Conf. Ser. 396 032088 Related content
Options for Joining edugain. Lukas Hämmerle, SWITCH DARIAH Workshop, Köln 18 October 2013
Options for Joining edugain Lukas Hämmerle, SWITCH DARIAH Workshop, Köln 18 October 2013 Outline 1. GE ANT and the Enabling Users task 2. Options to Join edugain 3. Discussion 2 GÉANT (GN3plus) - vital
Thebes, WS SAML, and Federation
Thebes, WS SAML, and Federation Internet2 Fall Member Meeting November 3, 2010 Thebes Consortium Georgetown University Arnie Miles adm35@georgetown.edu http://code.google.com/p/thebes/ Back story I haven't
Géant-TrustBroker Project Overview
Géant-TrustBroker Project Overview Daniela Pöhn 7 th FIM4R meeting Frascati, Italy April 24 th, 2014 Géant-TrustBroker [GNTB]: The basic idea Our goal (SP perspective): SPs connected to user s identity
Overview about the SCI-BUS Project (Communities and sustainability)
Overview about the SCI-BUS Project (Communities and sustainability) http://www.sci-bus.eu Peter Kacsuk MTA SZTAKI Start date: 2011-10-01 Duration: 36 months SCI-BUS is supported by the FP7 Capacities Programme
Qualys SAML 2.0 Single Sign-On (SSO) Technical Brief
Qualys SAML 2.0 Single Sign-On (SSO) Technical Brief Qualys provides its customers the option to use SAML 2.0 Single SignOn (SSO) authentication with their Qualys subscription. When implemented, Qualys
EGI federated e-infrastructure, a building block for the Open Science Commons
EGI federated e-infrastructure, a building block for the Open Science Commons Yannick LEGRÉ Director, EGI.eu www.egi.eu EGI-Engage is co-funded by the Horizon 2020 Framework Programme of the European Union
AARC. Christos Kanellopoulos AARC Architecture WP Leader GRNET. Authentication and Authorisation for Research and Collaboration
Authentication and Authorisation for Research and Collaboration AARC Christos Kanellopoulos AARC Architecture WP Leader GRNET Open Day Event: Towards the European Open Science Cloud January 20, 2016 AARC
A Simplified Access to Grid Resources for Virtual Research Communities
Consorzio COMETA - Progetto PI2S2 UNIONE EUROPEA A Simplified Access to Grid Resources for Virtual Research Communities Roberto BARBERA (1-3), Marco FARGETTA (3,*) and Riccardo ROTONDO (2) (1) Department
SA1 CILogon pilot - motivation and setup
SA1 CILogon pilot - motivation and setup Tamas Balogh & Mischa Sallé tamasb@nikhef.nl msalle@nikhef.nl AARC General Meeting, Milan 4 November 2015 Tamas Balogh & Mischa Sallé (Nikhef) 1 / 11 Outline 1
Do I Really Need Another Account? External Identities for Campus Applications
Do I Really Need Another Account? External Identities for Campus Applications Dedra Chamberlin, Cirrus Identity Eric Goodman, University of California Todd Haddaway, UMBC Tom Jordan, University of Wisconsin-Madison
Deliverable D9.3 Best Practice for User-Centric Federated Identity
12-03-2018 Best Practice for User-Centric Federated Identity Contractual Date: 31-10-2017 Actual Date: 12-03-2018 Grant Agreement No.: 731122 Work Package/Activity: 9/JRA3 Task Item: Task 3 Nature of Deliverable:
LionShare: A Hybrid Secure Network for Academic Collaboration. Michael J. Halm, Marek Hatala, Derek Morr and Alex Valentine
LionShare: A Hybrid Secure Network for Academic Collaboration Michael J. Halm, Marek Hatala, Derek Morr and Alex Valentine Presentation Overview Brief LionShare Overview LionShare Security Overview Connecting
Outline. Infrastructure and operations architecture. Operations. Services Monitoring and management tools
EGI-InSPIRE EGI Operations Tiziana Ferrari/EGI.eu EGI Chief Operations Officer 1 Outline Infrastructure and operations architecture Services Monitoring and management tools Operations 2 Installed Capacity
INDIGO-Datacloud Identity and Access Management Service
INDIGO-Datacloud Identity and Access Management Service RIA-653549 Presented by Andrea Ceccanti (INFN) andrea.ceccanti@cnaf.infn.it WLCG AuthZ WG Meeting Dec, 14th 2017 IAM overview INDIGO IAM The Identity
TextExpander Okta SCIM Configuration
TextExpander Okta SCIM Configuration This integration with Okta is currently available to customers. Contact TextExpander support to learn more. http://smle.us/support Supported Features TextExpander supports
Géant-TrustBroker Dynamic inter-federation identity management
Géant-TrustBroker Dynamic inter-federation identity management Daniela Pöhn TNC2014 Dublin, Ireland May 19 th, 2014 Agenda Introduction Motivation GNTB Overview GNTB in Details Workflow Initiation of GNTB
SAP Security in a Hybrid World. Kiran Kola
SAP Security in a Hybrid World Kiran Kola Agenda Cybersecurity SAP Cloud Platform Identity Provisioning service SAP Cloud Platform Identity Authentication service SAP Cloud Connector & how to achieve Principal
Regional e-infrastructures
Co-ordination & Harmonisation of Advanced e-infrastructures for Research and Education Data Sharing Regional e-infrastructures Dr. Ognjen Prnjat, GRNET CHAIN-REDS NKN Workshop, Assam www.chain-project.eu
Management der Virtuellen Organisation DARIAH im Rahmen von Shibboleth- basierten Föderationen. 58. DFN- Betriebstagung, Berlin, 12.3.
Management der Virtuellen Organisation DARIAH im Rahmen von Shibboleth- basierten Föderationen 58. DFN- Betriebstagung, Berlin, 12.3.2013 Peter Gietz, DAASI International GmbH DARIAH EU VCC 1 e-infrastructure
National R&E Networks: Engines for innovation in research
National R&E Networks: Engines for innovation in research Erik-Jan Bos EGI Technical Forum 2010 Amsterdam, The Netherlands September 15, 2010 Erik-Jan Bos - Chief Technology Officer at Dutch NREN SURFnet
AARC Overview. Licia Florio, David Groep. 21 Jan presented by David Groep, Nikhef.
AARC Overview Licia Florio, David Groep 21 Jan 2015 presented by David Groep, Nikhef AARC? Authentication and Authorisation for Research and Collaboration support the collaboration model across institutional
SAFARI Montage v6.5.28
Microsoft Office 365 Integration Instructions SAFARI Montage v6.5.28 NOTE: The Microsoft Office 365 integration must be configured by an Administrator. SAFARI Montage now offers a powerful new integration
Connect. Communicate. Collaborate. GN2 JRA5 update. Jürgen Rauschenbach (DFN), JRA5 team 04/02/08 Marseille. JRA5 Team
GN2 JRA5 update Jürgen Rauschenbach (DFN), JRA5 team 04/02/08 Marseille eduroam Working on the eduroam database and a new dissemination look (maps) RadSec release 1.0 Beta is out - reasonable stable and
Challenges in Authenticationand Identity Management
Sep 05 ISEC INFOSECURITY TOUR 2017 05.09.2017, Buenos Aires, Argentina Challenges in Authenticationand Identity Management CAMINANTE NO HAY CAMINO, SE HACE CAMINO AL ANDAR 2016 SecurIT Who is MerStar?
PoS(ISGC 2011 & OGF 31)119
Enabling JChem application on grid Miklos Kozlovszky MTA SZTAKI H-1111 Kende str. 13-17, Budapest, Hungary E-mail: m.kozlovszky@sztaki.hu Akos Balasko MTA SZTAKI H-1111 Kende str. 13-17, Budapest, Hungary
Introduction on Science Gateway
Introduction on Science Gateway Understanding access and functionalities Riccardo Rotondo riccardo.rotondo@ct.infn.it Catania, 10/03/2014 Outline } What is a Science Gateway? } Science Gateways } General
CAS s IDP system and resources in Education Cloud
CAS s IDP system and resources in Education Cloud DAREN ZHA CANS2015, Chengdu Outline CAS s IDP system and Education Cloud introduction Problems of interoperation A interoperation plan CAS s Education
Enabling Grids for E-sciencE. EGEE security pitch. Olle Mulmo. EGEE Chief Security Architect KTH, Sweden. INFSO-RI
EGEE security pitch Olle Mulmo EGEE Chief Security Architect KTH, Sweden www.eu-egee.org Project PR www.eu-egee.org EGEE EGEE is the largest Grid infrastructure project in the World? : 70 leading institutions
EGI-InSPIRE. GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies. Sergio Maffioletti
EGI-InSPIRE GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies Sergio Maffioletti Grid Computing Competence Centre, University of Zurich http://www.gc3.uzh.ch/
Oman Research & Education Network (OMREN)
Oman Research & Education Network (OMREN) Presented By: Said Al-Mandhari The Research Council Sultanate of Oman said.mandhari@trc.gov.om http://www.trc.gov.om 1 Table of Content OMREN Definition OMREN
SLCS and VASH Service Interoperability of Shibboleth and glite
SLCS and VASH Service Interoperability of Shibboleth and glite Christoph Witzig, SWITCH (witzig@switch.ch) www.eu-egee.org NREN Grid Workshop Nov 30th, 2007 - Malaga EGEE and glite are registered trademarks
The Trusted Attribute Aggregation Service (TAAS)
The Trusted Attribute Aggregation Service (TAAS) Privacy Protected Identity Management with User Consent, Minimum Dislosure and Unlinkability George Inman, David Chadwick, Kristy Siu What problems does
Certification Exam Guide SALESFORCE CERTIFIED IDENTITY AND ACCESS MANAGEMENT DESIGNER. Summer Salesforce.com, inc. All rights reserved.
Certification Exam Guide SALESFORCE CERTIFIED IDENTITY AND ACCESS MANAGEMENT DESIGNER Summer 18 2018 Salesforce.com, inc. All rights reserved. S ALESFORCE CERTIFIED IDENTITY AND ACCESS MANAGEMENT DESIGNER
Apache Rave Enterprise Social Networking Out Of The Box. Ate Douma, Hippo B.V. Matt Franklin, The MITRE Corporation November 9, 2011
Apache Rave Enterprise Social Networking Out Of The Box Ate Douma, Hippo B.V. Matt Franklin, The MITRE Corporation November 9, 2011 Overview About us What is Apache Rave? History Projects and people behind
Kerberos on the Web Thomas Hardjono
Kerberos on the Web Thomas Hardjono MIT Kerberos Consortium MIT Kerberos Conference 2007-2009 The MIT Kerberos Consortium. All Rights Reserved. Kerberos Today Enterprise, B2B, B2C Kerberos & Identity Infrastructure
Configuring Single Sign-on from the VMware Identity Manager Service to Marketo
Configuring Single Sign-on from the VMware Identity Manager Service to Marketo VMware Identity Manager JANUARY 2016 V1 Configuring Single Sign-On from VMware Identity Manager to Marketo Table of Contents
TF-WebRTC. 12/15/14 Paris / France. Mihály Mészáros
12/15/14 Paris / France Mihály Mészáros Aim of the Build community & competence Gather Information and circulate it in our community. Collect usage scenarios, focus points Gravity: Connect people in the
SAML 2.0 Software comparison Andreas Åkre Solberg EuroCAMP, Athens,
SAML 2.0 Software comparison Andreas Åkre Solberg andreas.solberg@uninett.no EuroCAMP, Athens, 2008-11-06 SAML 2.0 gives you the choice Earlier: Educational federation = shibboleth Now:? - Many shibboleth
The challenges of (non-)openness:
The challenges of (non-)openness: Trust and Identity in Research and Education. DEI 2018, Zagreb, April 2018 Ann Harding, SWITCH/GEANT @hardingar Who am I? Why am I here? Medieval History, Computer Science
eidas cross-sector interoperability
eidas cross-sector interoperability Christos Kanellopoulos GRNET edugain SG October 13 th, 2016 Background information 2013 - STORK-2 collaboration (GN3Plus) 2014-07 Adoption of the eidas Regulation 2014-09
Allowing the user to define the attribute release 21 May 2014
Allowing the user to define the attribute release policy @TNC2014 21 May 2014 Program Introduction to User Managed Access (UMA) Demo A GN3+ JRA3T2 work item User Managed Access Kantara project.. address
Authentication in the Cloud. Stefan Seelmann
Authentication in the Cloud Stefan Seelmann Agenda Use Cases View Points Existing Solutions Upcoming Solutions Use Cases End user needs login to a site or service End user wants to share access to resources
Integrating the YuJa Enterprise Video Platform with Dell Cloud Access Manager (SAML)
Integrating the YuJa Enterprise Video Platform with Dell Cloud Access Manager (SAML) 1. Overview This document is intended to guide users on how to integrate their institution s Dell Cloud Access Manager
Przejmij kontrolę nad użytkownikiem, czyli unifikacja dostępu do aplikacji w zróżnicowanym środowisku
Przejmij kontrolę nad użytkownikiem, czyli unifikacja dostępu do aplikacji w zróżnicowanym środowisku Łukasz Knysak Senior System Inżynier w Veracomp SA Back in 1963 JFK ordered that all nuclear warheads
Intro to the Identity Experience Engine. Kim Cameron, Microsoft Architect of Identity ISSE Paris November 2016
Intro to the Identity Experience Engine Kim Cameron, Microsoft Architect of Identity ISSE Paris November 2016 Intro to the Identity Experience Engine (IEE) Withering away of the enterprise domain boundary
MITA s approach to Open Standards. Presented by: Noel Cuschieri 24 th November 2015
MITA s approach to Open Standards Presented by: Noel Cuschieri 24 th November 2015 MITA Malta s population over 400K inhabitants occupying an area of 316 km 2 Malta Information Technology Agency (http://mita.gov.mt)
Federated AAI and the World of Tomorrow. Rion Dooley
Federated AAI and the World of Tomorrow Rion Dooley Who is this guy? Systems provider @ TACC Infrastructure provider @ iplant/xsede Service provider @ Agave Application developer @ GatewayDNA Support staff
The Future of Indoor Plumbing. Dr Ken Klingenstein Director, Internet2 Middleware and Security
The Future of Indoor Plumbing Dr Ken Klingenstein Director, Internet2 Middleware and Security Topics The Work So far Indoor, policy-based plumbing IdM in the enterprise Inter-realm and inter-institutional
GÉANT-TrustBroker project overview
GÉANT-TrustBroker project overview Slides assembled by the Géant-TrustBroker team at Leibniz Supercomputing Centre, Germany for a short presentation by Licia Florio at the TF-EMC2 meeting Zurich, Switzerland
Sustainability in Federated Identity Services - Global and Local
Sustainability in Federated Identity Services - Global and Local What works and what doesn t with eduroam and edugain Ann Harding @hardingar Activity Lead, Trust & Identity Development, GÉANT Person who
Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
ADV1591BU Delivering Virtual Desktops and Apps via the Digital Workspace with Workspace ONE and VMware Horizon VMworld 2017 Content: Not for publication Peter Bjork @thepeb & Matt Coppinger @mcopping #VMworld
MOC 20416B: Implementing Desktop Application Environments
MOC 20416B: Implementing Desktop Application Environments Course Overview This course provides students with the knowledge and skills to design, deploy, and manage a physical and virtual Windows Server
Deliverable DJRA1.1. Use-Cases for Interoperable Cross- Infrastructure AAI
20-09-2018 Deliverable DJRA1.1 Contractual Date: 28-02-2018 Actual Date: 220-09-2018 Grant Agreement No.: 653965 Work Package: JRA1 Task Item: 1.1 Lead Partner: EGI Authors: Diego Scardaci (EGI Foundation),
Attribute Aggregation in Federated Identity Management. David Chadwick, George Inman, Stijn Lievens University of Kent
Attribute Aggregation in Federated Identity Management David Chadwick, George Inman, Stijn Lievens University of Kent Acknowledgements Project originally funded by UK JISC, called Shintau http://sec.cs.kent.ac.uk/shintau/
Federated Identity Management
Federated Identity Management SWITCHaai Team aai@switch.ch Agenda What is Federated Identity Management? 2 What is a Federation? The SWITCHaai Federation Interfederation Evolution of Identity Management
Ramnish Singh IT Advisor Microsoft Corporation Session Code:
Ramnish Singh IT Advisor Microsoft Corporation Session Code: Agenda Microsoft s Identity and Access Strategy Geneva Claims Based Access User access challenges Identity Metasystem and claims solution Introducing
Grouper Working Group
Grouper Working Group Agenda Internet2 IPR, agenda bash" Grouper v2.0 in brief" Whoʼs using Grouper? Survey take aways" Focus on v2.x: current plans & discussion" Grouper & OSIdM4HE" Your items " 2" October
[GSoC Proposal] Securing Airavata API
![[GSoC Proposal] Securing Airavata API](/thumbs/93/113254568.jpg "[GSoC Proposal] Securing Airavata API")
[GSoC Proposal] Securing Airavata API TITLE: Securing AIRAVATA API ABSTRACT: The goal of this project is to design and implement the solution for securing AIRAVATA API. Particularly, this includes authenticating
EUDAT & AAI. Daan Broeder MPI for Psycholinguistics
EUDAT & AAI Daan Broeder MPI for Psycholinguistics Initially six research communities on Board EPOS: European Plate Observatory System CLARIN: Common Language Resources and Technology Infrastructure ENES:
CIAM: Need for Identity Governance & Assurance. Yash Prakash VP of Products
CIAM: Need for Identity Governance & Assurance Yash Prakash VP of Products Key Tenets of CIAM Solution Empower consumers, CSRs & administrators Scale to millions of entities, cloud based service Security