AAI Attributes Thomas Lenggenhager,
|
|
|
- Ashlee Miles
- 5 years ago
- Views:
Transcription
1 AAI Attributes Thomas Lenggenhager, 2004
2 Directories within a AAI Home Organization AAI-enabled Home Organization Authentication System User Directory AAI Authentication System any Apache compatible authentication method: LDAP, PAM, RADIUS, TACACS, end-user certificates, Web SSO (e.g. Pubcookie), any Tomcat compatible authentication method: e.g. Web SSO (CAS): LDAP, end-user certificates, NIS, SQL database, Kerberos any IIS compatible authentication method User Directory Integration via Java APIs LDAP via JNDI Databases via JDBC Username is the link between the two parts SSO = Single Sign On 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 2
3 Authorization Attributes (1) AAI transfers user attributes from a Home Organization to a Resource Requires a common understanding of what a value means Authorization Attribute Specification v1.1 A task force selected the attributes for aai minimal set to start with attributes with pre-existing common understanding in line with foreign activities Descriptions are LDIF like, but use of LDAP not required 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 3
4 Authorization Attributes (2) Personal attributes Unique Identifier Surname Given name Address(es) Phone number(s) Preferred language Date of birth Gender Group membership Name of Home Organization Type of Home Organization Affiliation (student, staff, faculty, ) Study branch Study level Staff category Group membership Organization Path Organizational Unit Path based on eduperson specification study branch, study level, staff category are based on SHIS/SIUS username and password are missing only used locally! commonname is missing no common understanding on how to use it Matrikelnummer is missing for data protection reasons 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 4
5 studybranch & studylevel Based on Schweizerisches Hochschulinformationssystem (SHIS/SIUS) (Fachbereich Bildung und Wissenschaft) Example for Universities of Applied Sciences studybranch1 (17 codes) Landwirtschaft Agriculture studybranch2 (64 codes) Pflanzenproduktion Production végétale studybranch3 (110 codes) Obst-, Wein-, Gartenbau Arboriculture fruitière/horticulture studylevel Studierende in der Studienphase, die zum Bachelor führt Etudiants réguliers se trouvant dans une phase d études qui les conduit au titre de Bachelor 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 5
6 staffcategory Only very broad categories, also derived from SHIS/SIUS Categories defined Teaching/Reaserch 101/201 Professors and Permanent Researchers 102/202 Oberer Mittelbau Corps intermédiare supérieur 103/203 Unterer Mittelbau Corps intermédiare inférieur Administration/Support/Technical 301 Administrative Personnel 302 Administrative Personnel: Apprentices and Interns 303 Technical Personnel 304 Technical Personnel: Apprentices and Interns 305 Janitors, Building Managers 306 Social and Wellness Personnel 307 Library Personnel 308 Safety Personnel 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 6
7 Granting Access Ueli Kienholz, 2004
8 Method 1: aai Attributes Login: p.mueller PW: 4rtz3w Web-Application Shibboleth Home Organisation HomeOrg = UniZH Affiliation = Student StudyLevel = Shibboleth Component Access Rule: HomeOrg = UniZH UniBE UniL Affiliation = Student StudyLevel = AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 8
9 Method 2: Entitlement Login: p.mueller PW: 4rtz3w Web-Application Entitlement = Shibboleth Home Organisation Shibboleth Component Access Rule: Entitlement = AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 9
10 Method 3: Definition of additional Attributes Login: p.mueller PW: 4rtz3w Web-Application Department = IAM Shibboleth Home Organisation Shibboleth Component Access Rule: Department = IAM 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 10
11 Method 4: Application has it s own Access Control Shibboleth Home Organisation Login: p.mueller PW: 4rtz3w UniqueID = @ethz.ch Shibboleth Component Web Application Allowed Users Username HB5ghI@unibe.ch @ethz.ch Gz58f7@unibe.ch ktziwlg@unil.ch 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 11
12 System Requirements Valéry Tschopp, 2004
13 Supported Servers for Target Installations Server OS Windows NT, 2000, XP, 2003 Linux (any distribution) Solaris Mac OS X Web Servers Apache 1.3.x Apache 2.x IIS 4.x, 5.x, 6.x 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 13
14 Supported Applications Static content on Apache Applications (PHP, Perl,..) running on Apache Applications (ASP, PHP,...) running on IIS Web Servers 4, 5, 6 JAVA web-applications via mod_jk and Apache / JK ISAPI redirector and IIS List of shibbolized applications at * ArtSTOR * Blackboard * CSA * Darwin Streaming Server * eacademy * EBSCO Publishing * Elsevier ScienceDirect * ExLibris - SFX * Fedora * Gale * Higher Markets * JSTOR * Napster * NSDL * OCLC * Ovid Technologies Inc. * Proquest Information and Learning * SYMPA * TWiki * Useful Utilities - EZProxy * Web Assign * WebCT (Campus Ed./Vista) * Zope4Edu 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 14
15 Browser Requirements Cookies Browser redirect SSL If no JavaScript: additional click necessary 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 15
16 Requirement: Server Certificates Can I trust this Resource and send User Attributes to it? Attribute Request HomeOrg User Attributes Resource aai.do main.c h CA Can I trust this HomeOrg and rely on the User Attributes that were sent to me? host.d omain. ch CA 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 16
17 Exception 1: Mere Test-Purposes aai Federation c Test TestCA TestCA Test ( Test TestCA 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 17
18 Exception 2: SSL connection from Browser Web Browser M Shibboleth HomeOrg Web Server, Port 443 Shibboleth Resource Web Server, Port 443 Handle Service e.g. Verisign, Thawte SHIRE e.g. Verisign, Thawte Attribute Authority Server to Server Communication SHAR 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 18
19 Questions? Q & A aai@switch.ch 2004 AAI Resource Workshop, , Thomas Lenggenhager, Ueli Kienholz, Valéry Tschopp 19
AAI Attributes Thomas Lenggenhager,
AAI Attributes Thomas Lenggenhager, 2004 SWITCH Directories within a AAI Home Organization AAI-enabled Home Organization Authentication System Authentication System any Apache
AAI Tutorial. SWITCHaai Team
AAI Tutorial SWITCHaai Team aai@switch.ch Berne, 5. May 2009 Agenda 1 What is AAI? 2 Demo 3 The SWITCHaai federation 4 5 Technical details behind AAI Summary and Q&A 2 AAI - Key to access them all AAI
Integration of Web Applications
Integration of Web Applications The AAI Team, aai@switch.ch 2007 SWITCH Integration of Web Applications! Introduction! PHP and Java Integration! Application and Database Integration! AAIportal! WAYF Integration
Installation and Configuration Valéry Tschopp,
Installation and Configuration Valéry Tschopp, 2005 SWITCH Deployment Guides HOWTOs and Guides http://www.switch.ch/aai/howto/ Shibboleth Target Deployment Guides http://www.switch.ch/aai/targetdeployment.html
What does it take to participate in the AAI?
What does it take to participate in the? Thomas Lenggenhager, SWITCH December 2, 2002 2002 SWITCH Preconditions for Home Organizations Authentication Registration s Home Org Registration A Home Organization
AA Enabling applications Why and how to make web applications AAI ready. Lukas Hämmerle
AA Enabling applications Why and how to make web applications AAI ready Lukas Hämmerle lukas.haemmerle@switch.ch Presentation Overview 1 Why adapting web applications to an AAI? 2 3 4 5 Do I have to care
Technical Background Information
Technical Background Information Ueli Kienholz, SWITCH Rolf Gartmann, SWITCH Claude Lecommandeur, EPFL December 2, 2002 2002 SWITCH PAPI Rolf Gartmann, SWITCH Security Group December 2, 2002 2002 SWITCH
Authentication for Web Services. Ray Miller Systems Development and Support Computing Services, University of Oxford
Authentication for Web Services Ray Miller Systems Development and Support Computing Services, University of Oxford Overview Password-based authentication Cookie-based authentication
Identity and Access Management Infrastructure for Oxford University
Identity and Access Management Infrastructure for Oxford University John Ireland Systems Development and Support Section Manager Oxford University Computing Services Identity and Access Management Digital
Supporting a Widely Deployed Campus Shibboleth Implementation
Spring 2012 Internet2 Member Meeting April 25, 2012 Supporting a Widely Deployed Campus Shibboleth Implementation Russell Beall, University of Southern California Brendan Bellina, University of Southern
MIDDLEWARE: SINGLE SIGN ON AUTHENTICATION AND AUTHORIZATION FOR GROUPS
MIDDLEWARE: SINGLE SIGN ON AUTHENTICATION AND AUTHORIZATION FOR GROUPS Ramesh Puljala Computer and Information Sciences, ramesh@uab.edu Rajani S. Sadasivam Electrical and Computer Engineering, University
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: CARLETON UNIVERSITY Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
Creating links to articles in IVCC library databases Updated March 18, 2014
Creating links to articles in IVCC library databases Updated March 18, 2014 Faculty and students can create links to articles, ebooks, ebook chapters, videos, or video segments in many of the IVCC library
Canadian Access Federation: Trust Assertion Document (TAD)
Submit Form Participant Name: Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative
Johns Hopkins
Wireless Configuration Guide: Windows 8 Additional hopkins wireless network instructions and requirements for Windows XP, Vista, 7, Mac OS X, Linux, and other Mobile versions can be found at: http://www.it.johnshopkins.edu/services/network/wireless/
Johns Hopkins
Wireless Configuration Guide: Windows Vista Additional hopkins wireless network instructions and requirements for Windows 8, 7, XP, Mac OS X, Linux, and Mobile versions can be found at: http://www.it.johnshopkins.edu/services/network/wireless/
Introducing Shibboleth. Sebastian Rieger
Introducing Shibboleth Sebastian Rieger sebastian.rieger@gwdg.de Gesellschaft für wissenschaftliche Datenverarbeitung mbh Göttingen, Germany CLARIN AAI Hands On Workshop, 25.02.2009, Oxford eresearch Center
SAML-Based SSO Solution
About SAML SSO Solution, page 1 SAML-Based SSO Features, page 2 Basic Elements of a SAML SSO Solution, page 2 SAML SSO Web Browsers, page 3 Cisco Unified Communications Applications that Support SAML SSO,
Installation and Configuration Patrik Schnellmann,
Installation and Configuration Patrik Schnellmann, 2005 SWITCH Deployment Guides HOWTOs and Guides http://www.switch.ch/aai/howto/ Shibboleth Target Deployment Guides http://www.switch.ch/aai/targetdeployment.html
ShibVomGSite: A Framework for Providing Username and Password Support to GridSite with Attribute based Authorization using Shibboleth and VOMS
ShibVomGSite: A Framework for Providing Username and Password Support to GridSite with Attribute based Authorization using Shibboleth and VOMS Joseph Olufemi Dada & Andrew McNab School of Physics and Astronomy,
1. Federation Participant Information DRAFT
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES [NOTE: This document should be considered a as MIT is still in the process of spinning up its participation in InCommon.] Participation in InCommon
Organizing a Campus Change: Planning for Identity and Access Management Improvements at UF
Organizing a Campus Change: Planning for Identity and Access Management Improvements at UF Dr. Mike Conlon Director of Data Infrastructure June 3, 2008 University of Florida $2B annual revenue, $518M in
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
Greek Research and Technology Network. Authentication & Authorization Infrastructure. Faidon Liambotis. grnet
Greek Research and Technology Network Authentication & Authorization Infrastructure Faidon Liambotis faidon@.gr Networking Research and Education February 22 nd, 2011 1 Who am I? Servers & Services Engineer,
AAI-SSO with Active Directory. Kerberos Login Handler
AAI-SSO with Active Directory Kerberos Login Handler Project Overview One of FHNW s AAA projects Use case: SSO for AAI Applications with Active Directory domain logins Project goal: Development of a Kerberos
Qualys SAML 2.0 Single Sign-On (SSO) Technical Brief
Qualys SAML 2.0 Single Sign-On (SSO) Technical Brief Qualys provides its customers the option to use SAML 2.0 Single SignOn (SSO) authentication with their Qualys subscription. When implemented, Qualys
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Canadian Access Federation: Trust Assertion Document (TAD)
1. Canadian Access Federation Participant Information 1.1.1. Organization name: DOUGLAS COLLEGE 1.1.2. Information below is accurate as of this date: November 16, 2017 1.2 Identity Management and/or Privacy
Contents. Windows 7 Instructions Windows 10 Instructions Android Instructions Mac OS Instructions ios Instructions...
The following provides instructions on how to connect to the SJCD-Secure Wireless Network from a variety of operating systems and devices. If you experience any difficulty with these instructions, please
IBM Tivoli Identity Manager V5.1 Fundamentals
IBM Tivoli Identity Manager V5.1 Fundamentals Number: 000-038 Passing Score: 600 Time Limit: 120 min File Version: 1.0 http://www.gratisexam.com/ IBM 000-038 IBM Tivoli Identity Manager V5.1 Fundamentals
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Copyright
This video looks at Claim Based/Identity Based systems using Active Directory Federation Services as an example. An example of a claim based system is where the user logs into a system like a web page
New trends in Identity Management
New trends in Identity Management Peter Gietz, DAASI International GmbH peter.gietz@daasi.de Track on Research and Education Networking in South East Europe, Yu Info 2007, Kopaionik, Serbia 14 March 2007
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Open Source in the Corporate World. Open Source. Single Sign On. Erin Mulder
Open Source in the Corporate World Open Source Single Sign On Erin Mulder Agenda Introduction Single Sign On for Multiple s Shared directory (e.g. OpenLDAP) Proxy systems (e.g. Yale CAS) X.509 certificates
Unfortunately it was not possible to have people from GRID, so the scenario described in this reports is not complete.
AA Workshop Report 26-27 November, 2002 Stockholm, Sweden Programme The first workshop about authentication and authorization infrastructure, foreseen in the Terms of Reference of TF-AACE, was arranged
Perceptive DataTransfer
Perceptive DataTransfer System Overview Guide Version: 6.5.x Written by: Product Knowledge, R&D Date: May 2017 2017 Lexmark. All rights reserved. Lexmark is a trademark of Lexmark International, Inc.,
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
BELNET R&E federation Technical policy
BELNET R&E federation Technical policy Version 1.0 Version Date 0.1 11/03/09 First draft for advisory committee 0.2 11/05/09 Added attribute schema; changes after 1st meeting 0.3 01/07/10 Changed metadata
Johns Hopkins
Wireless Configuration Guide: Windows Vista Additional hopkins wireless network instructions and requirements for Windows XP, Mac OS X, and Linux can be found at: http://www.it.johnshopkins.edu/services/networking/wireless/
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name:_Gale_Cengage Learning Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
User Directories. Overview, Pros and Cons
User Directories Overview, Pros and Cons Overview Secure ISMS can operate with one or more of the following user directories. Secure ISMS Users (ISMS) Internal users local to the Secure ISMS application
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Introduction to Operating Systems. Note Packet # 1. CSN 115 Operating Systems. Genesee Community College. CSN Lab Overview
Introduction to Operating Systems Note Packet # 1 CSN 115 Operating Systems Genesee Community College CSN Lab Overview Dual booted Windows/Linux Workstations Linux workstations currently run CentOS and
PSUMAC101: Intro to Auth
PSUMAC101: Intro to Auth We Are... Jeremy Hill Systems Design Specialist, Applied Information Technology Ryan Coleman Systems Administrator, Applied Information Technology Overview Why, What and When of
Best Practices: Authentication & Authorization Infrastructure. Massimo Benini HPCAC - April,
Best Practices: Authentication & Authorization Infrastructure Massimo Benini HPCAC - April, 03 2019 Agenda - Common Vocabulary - Keycloak Overview - OAUTH2 and OIDC - Microservices Auth/Authz techniques
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES (POP)
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES (POP) GALLAUDET UNIVERSITY Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant")
EGI-InSPIRE. GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies. Sergio Maffioletti
EGI-InSPIRE GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies Sergio Maffioletti Grid Computing Competence Centre, University of Zurich http://www.gc3.uzh.ch/
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: Concordia University of Edmonton Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that
IT Governance Committee Review and Recommendation
IT Governance Committee Review and Recommendation Desired Change: Approval of this policy will establish Security Standards for the UCLA Logon Identity for anyone assigned a UCLA Logon ID/password and
A Welcome to Federated Identity Nate Klingenstein, Internet2, USA. Prepared for the Matsuyama University, December 2013
A Welcome to Federated Identity Nate Klingenstein, Internet2, USA Prepared for the Matsuyama University, December 2013 www.incommon.org Welcome to the presentation and thanks to our hosts What is Federated
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: Trent University Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES There is also a glossary at the end of this document that defines terms shown in italics. Participation in the InCommon Federation ( Federation )
CHUV CHUV. Vincent Bex Systems Engineer Patrick Zosso Infrastructure Project Manager
AAI @ Vincent Bex Systems Engineer Vincent.Bex@chuv.ch Patrick Zosso Infrastructure Project Manager Patrick.Zosso@chuv.ch Agenda Presentation of the Security concepts at The challenge AAI implementation
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
TECHNICAL GUIDE SSO SAML. At 360Learning, we don t make promises about technical solutions, we make commitments.
TECHNICAL GUIDE SSO SAML At 360Learning, we don t make promises about technical solutions, we make commitments. This technical guide is part of our Technical Documentation. 2 360Learning is a Leading European
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: Acadia University Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
The Evolution of an Integrated User Directory
Informatikdienste / IT-Services The Evolution of an Integrated User Directory, Informatikdienste ETH Zurich The Evolution of an Integrated User Directory Creation of many databases The need for integration
VMware Identity Manager Administration. MAY 2018 VMware Identity Manager 3.2
VMware Identity Manager Administration MAY 2018 VMware Identity Manager 3.2 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments
Hyperion System 9 BI+ Analytic Services
Hyperion System 9 BI+ Analytic The Hyperion System 9 BI+ Analytic release 9.3 Support Matrix includes support information for the following areas: Operating Systems o Server o Client Web / Application
icc.edu/library Films on Demand Guide for Faculty and Staff
icc.edu/library Films on Demand Guide for Faculty and Staff Finding Films on Demand on the Library website: From the homepage of ICC Library website locate the Library Collections menu and click on Streaming
Hyperion System 9 Financial Management release
Hyperion System 9 Financial Management release 9.2.0.3 The Hyperion System 9 Financial Management release 9.2.0.3 Matrix includes support information for the following areas: Operating Systems o Server
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: St. Thomas University Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
WILLIAM CAREY UNIVERSITY Information Technology. Student Technology Guide
WILLIAM CAREY UNIVERSITY Information Technology Student Technology Guide INFORMATION TECHNOLOGY Student Technology Guide Version 1.3 August 26, 2009 2009 William Carey University 498 Tuscan Avenue, Box
Introduction to lab and project tools. Contents
Introduction to lab and project tools The present document describes how to use the Mac computers of Room 143 of the Internef building (hereafter the lab) as well as the software configuration required
Architecture Assessment Case Study. Single Sign on Approach Document PROBLEM: Technology for a Changing World
Technology for a Changing World Architecture Assessment Case Study Single Sign on Approach Document PROBLEM: Existing portal has Sign on Capabilities based on the SQL Server database and it s not having
Perceptive DataTransfer
Perceptive DataTransfer System Overview Version: 6.2.x Written by: Product Documentation, R&D Date: January 2013 2013 Perceptive Software. All rights reserved CaptureNow, ImageNow, Interact, and WebNow
John Heimann Director, Security Product Management Oracle Corporation
John Heimann Director, Security Product Management Oracle Corporation Oracle9i Application Server v2 Security What s an Application Server? Development and deployment environment Web(HTML,XML,SOAP) J2EE
System Architecture Overview. Version 1.1.1
System Architecture Overview Version 1.1.1 The information in this document is subject to modification without any previous notice. Data used in the examples are fictitious. It is prohibited to reproduce
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
Faculty Quick Guide to Blackboard. Blackboard Version 9.1. Christine Paige Educational Technology Specialist.
Faculty Quick Guide to Blackboard Blackboard Version 9.1 Christine Paige Educational Technology Specialist paigec@strose.edu (518) 337-4912 July 2010 Table of Contents Description of Blackboard... 3 Uses
Credentialing for InCommon
Credentialing for InCommon Summary/Purpose: This policy describes the means by which user accounts and credentials are managed by the University of Mississippi, as related to participation in the InCommon
Faculty Guide to Blackboard
Faculty Guide to Blackboard August 2012 1 Table of Contents Description of Blackboard... 3 Uses of Blackboard... 3 Hardware Configurations and Web Browsers... 3 Logging Into Blackboard... 3 Customizing
Shibbolizing uportal and a Path for Delegated Authentication with Shibboleth
Shibbolizing uportal and a Path for Delegated Authentication with Shibboleth Tom Barton, Scott Cantor, and Andrew Petro The Ohio State University, University of Chicago, and Unicon, respectively. Jasig
Overview of Professional Quest Technologies
Overview of Professional Quest Technologies Professional Quest Web Architecture Professional Quest's utilizes a number of industry standard components in its web architecture. Server Web Pages For the
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
QuickStart Guide for Mobile Device Management. Version 8.7
QuickStart Guide for Mobile Device Management Version 8.7 JAMF Software, LLC 2013 JAMF Software, LLC. All rights reserved. JAMF Software has made all efforts to ensure that this guide is accurate. JAMF
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
SAML-Based SSO Solution
About SAML SSO Solution, page 1 Single Sign on Single Service Provider Agreement, page 2 SAML-Based SSO Features, page 2 Basic Elements of a SAML SSO Solution, page 3 Cisco Unified Communications Applications
Hyperion System 9 Strategic Finance release
Hyperion System 9 Strategic Finance release 9.2.0.3 The Hyperion System 9 Strategic Finance release 9.2.0.3.0 Matrix includes support information for the following areas: Operating Systems o Server o Client
SAP Security in a Hybrid World. Kiran Kola
SAP Security in a Hybrid World Kiran Kola Agenda Cybersecurity SAP Cloud Platform Identity Provisioning service SAP Cloud Platform Identity Authentication service SAP Cloud Connector & how to achieve Principal
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
AAI at Unil. Home Organization Integration
AAI at Unil Home Organization Integration GESTU > Gestion des utilisateurs > Accès informatique (username/password) > Mailbox and email address > Security groups > Students: automatic > Employees: web
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
Advanced PDS Topics. Andrew Walsh Team Lead, NA Primo Support Teams
Advanced PDS Topics Andrew Walsh Team Lead, NA Primo Support Teams andrew.walsh@exlibrisgroup.com 1 Copyright Statement All of the information and material inclusive of text, images, logos, product names
with Access Manager 51.1 What is Supported in This Release?
51 51 Integrating Microsoft SharePoint Server with Access Manager This chapter explains how to integrate Access Manager with a 10g WebGate and Microsoft SharePoint Server. It covers the following topics:
VMware Identity Manager Administration
VMware Identity Manager Administration VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
Community Site Quick Guide to Blackboard. Blackboard Version 9.1. Christine Paige Educational Technology Specialist.
Community Site Quick Guide to Blackboard Blackboard Version 9.1 Christine Paige Educational Technology Specialist paigec@strose.edu (518) 337-4912 August 2010 Table of Contents Description of Blackboard...
Lecture no. 2 Shibboleth SP: installation and basic configuration for Single Sign On (SSO) second part. Andrea Biancini Consortium GARR
Lecture no. 2 Shibboleth SP: installation and basic configuration for Single Sign On (SSO) second part Andrea Biancini Consortium GARR Outline Description of user session: attributes How to read session
Higher Education - Key IAM Components and Requirements
Higher Education - Key IAM Components and Requirements 3. 4. 5. 6. 7. 8. 9. 10. 1 1 13. 14. 15. 16. 17. 18. Creating Digital Identities - ID Match Manage Digital Identities - Self-Service Manage Digital
The Four A s of Access A practical guide to auditing an access process.
The Four A s of Access A practical guide to auditing an access process. Ken Heskett, University of Michigan Objectives Understand access-related terminology and how you can use this information to help