in Swiss Higher Education

Transcription

1 AAI in Swiss Higher Education Ueli Kienholz, 2006 SWITCH

2 Without AAI University A Student Admin Web Mail e-learning Tedious user registration at all resources Unreliable and outdated user data at resources Different login processes Library B e-journals Literature DB Many different passwords Many resources not protected due to difficulties University C Research DB Often IP-based authorization e-learning Costly implementation of inter-institutional access User Administration Authentication Authorization Resource Credentials 2

3 With AAI University A AAI Student Admin Web Mail e-learning No user registration and user data maintenance at resource needed Single login process for the users Library B e-journals Many new resources available for the users University C Literature DB Research DB e-learning Enlarged user communities for resources Authorization independent of location Efficient implementation of inter-institutional access User Administration Authentication Authorization Resource Credentials 3

4 SWITCHaai Project Timeline Study Pilot Implementation Operation Architecture Evaluation -> Shibboleth Study, Planning 4

5 Shibboleth Open Source Developed by Internet2 Federated Approach Privacy National deployment projects in the US, UK and Finland, growing interest in other European countries For web resources only - as a first step Based on SAML Cooperations with Liberty Alliance Cooperations with Content Providers (e-journals) 5

6 Demo (Try it yourself) -> Live Demo -> demo resource 6

7 Demo 7

8 Single Sign On Home Org Credentials WAYF Demo Resource 9 wayf.switch.ch kelut.switch.ch E-Learning Resource dokeos.unige.ch 8

9 SWITCHaai Building Blocks Interoperation Organisational Framework Identity Providers (Home Orgs) Service Providers (Resources) Central Services Funding 9

10 Identity Providers (Home Orgs) in SWITCHaai Coverage: Users (> 2/3 of all) In Swiss Higher Education Université de Genève Université de Neuchâtel EPFL HES-SO Universität Basel Université de Lausanne University Hospital Zürich Pädagogische Hochschule Bern Université de Fribourg Universität Zürich Universität Bern SWITCH Zürcher Hochschule Winterthur Universität St. Gallen ETH Zürich Universität Luzern Fachhochschule Zentralschweiz SUPSI USI Operational Getting ready Identity Providers 10

11 Types of Service Providers e-learning Moodle AD Learn & Co Blackboard libraries ScienceDirect other web applications IS-Academia commercial SwissLex Bundesgericht active users 79 resources Cablecom eshops Service Providers 11

12 Organisational Framework SWITCH acts as SWITCHaai Federation Service Provider Federation membership based on signed service agreements Organisation 12

13 Authorization Attributes Personal Group Membership Unique Identifier Surname Given name Home Organization Name Home Organization Type Affiliation (student, staff, ) Implementation of Attributes Mandatory Recommended or optional Address(es) Phone number(s) Preferred language Date of birth Gender Study branch Study level Staff category Group membership Organization Path Organizational Unit Path Based on eduperson Attributes Schweizerisches Hochschulinformationssystem (SHIS) NO username, password Interoperation Attribute Specification: 13

14 Access Control Example: DOIT DOIT: Dermatology Online with Interactive Technology Resource Identity Provider Access Rule: HomeOrg = UniZH UniBE UniL Affiliation = Student StudyBranch = Medicine StudyLevel = 20 Universität Zürich Universität Bern Universtié de Lausanne Service Providers 14

15 Central AAI-Services Strategy & Marketing International Contacts Support, Consulting, Training Providing Federation-specific Files and Configuration Guides Operating WAYF (Where Are You From Server) Test-HomeOrg and Test-Resource Tools (AAIportal, Resource Registry) Virtual Home Organization Jump Start Service Central Services 15

16 Questions? Q & A aai@switch.ch 16