What is TIER? Trust and Identity in Education and Research

Transcription

1 MELISSA WOO, U OF OREGON, ANN WEST, INTERNET2 WHAT IS TIER? WEBINAR MARCH 4, 2015 What is TIER? Trust and Identity in Education and Research

2 What is TIER all about? -- The Environmental Context Federated Identity Management is essential for higher education But there are challenges Individuals wish to retain digital identities across time and place Trans-institutional collaborations and projects critical to scholarship None of the commercially-supported inter-organizational identity services provide the design, trust or global scale required for higher education 2 March 5, Internet2

3 What is TIER all about? -- The Environmental Context, cont d Many pieces are in place InCommon Federation Shibboleth for SSO Authentication Grouper for Authorization Many are evolving COmanage for Unified Administration Privacy Lens for Discretionary Attribute Management 3 But these pieces are not consistently organized not readily interoperable have no current mechanism for ongoing support and sustained development March 5, Internet2

4 TIER Unified Model Secure Directory, Iden0ty and Metadata Services Single Sign- on and Iden0ty Components Metadata Registry Services Lightweight Workflow Services Mul0 Factor AuthN (Who) Mul0- Level (Groups) AuthZ (What) Business Rules Engine / Grammar Network Objects (Files, Datasets, etc.) Federated Registry (Directory Search / Lookup) People Files / Datasets Nodes Persistence and Replica0on Automated Provisioning / Deprovisioning and Rules Enforcement 4

5 What is TIER all about? -- Summary Provide truly effective federated identity, attribute and authorization management Integrate the thinking of over a decade of community work in IAM Get it right, and make it coherent across the stack across services across institutions, organizations, groups Accelerate broad adoption and maturity of IAM across all participants Integrate existing components where possible 5 Sustain development and support plan March 5, Internet2

6 Trust and Identity in Education and Research Ini0a0ve TIER Evolution over Time Iden0fied the Community Need Program Iden0fied the Need for A Call for Custodial and Ongoing (Sustaining) Support Time Projects The outcome of workshops and community iden0fied vigneues illustra0ng the desired results 6 We are Here

7 Why is TIER important, now? Current development efforts that our Community is relying on don t have a long-term sustainability model Increasing deployment of cloud services and need for interinstitutional collaboration requires a stable, integrated, communitywide platform and demands a re-engineered approach Varying degrees of maturity of identity management services across institutions provide timely opportunity to accelerate maturity and build coherence 7 Attribute management (information about an identity) is as important as identity management March 5, Internet2

8 Why is TIER important, now? Risks of inaction This won t get any easier or less complex Commercial services are being actively promoted in various deployment scenarios (e.g. research) thus increasing fragmentation of IAM Landscape Insufficient motivation for commercial services to get it right for Higher Education and Research 8 March 5, Internet2

9 Maturity Model Concept Emerging TIER will be architected to enable institutions positioned at different points on the IAM maturity model. Established The continuum is not absolute, and doesn t correlate to an institution s size. Advanced 9

10 TIER for institutions with advanced IAM infrastructure Choose which cloud or on-premises components are useful and connect into/deploy Participate in aligning your practices to the community-defined set to ensure researchers, faculty, staff and students have the most up to date ability to access resources 10 March 5, Internet2

11 TIER for institutions looking to revamp what they have Use a complete solution in cloud or on-prem. Integrates best of the community thinking on identity OR Leverage some of what you have and add pluggable components Participate in aligning your practices to the community-defined set to ensure researchers, faculty, staff and students have the most up to date ability to access resources 11 March 5, Internet2

12 TIER Design, Development, Governance Consistent requirements gathering, design and execution cycle Multiple ways of contributing requirements, ideas and expertise Coordinated approach to enable Trust and Identity in Education and Research at scale for thousands of institutions and service providers while also satisfying diverse local use cases 12 March 5, Internet2

13 Governance Structured as an Internet2 project TIER Community Investor Council Committees InCommon Steering Committee (ICSC) Service Development Steering Committee (SDSC) External Relations Subcommittee (members from ICSC and SDSC) 13

14 Governance TIER Community Investor Council Klara Jelinkova University of Chicago, InCommon TBN University of Utah, Kuali Dennis Cromwell Indiana University, InCommon Eric Denna University of Maryland (also Kuali) Tracy Futhey Duke University Chris Holmes Baylor University, InCommon Ron Kraemer University of Notre Dame Kevin Morooney Penn State University (also Kuali) John O Keefe Lafayette College (InCommon) Kelli Trosvig University of Washington (also Kuali) Melissa Woo University of Oregon, InCommon Shel Waggener Internet2 14

15 Funding Need Near-term Development and Sustaining Near-term: 42+ (more are welcome) schools signed up for a total of $75,000 each over three years ($25,000 annually) Accelerate development work, with consistent packaging for deployment Sustaining (in analysis and development) Dues increment for Internet2 members Service subscription fees 15

16 Informing the Community & the Project Webinars 3 workshops (2 completed; #3 April 8-9, Tempe AZ) CIOs and Identity Services Architects Identify requirements, guiding principles, early thoughts about first deliverables, promote consistent expectations Documents available for public comment Strawman Technical Roadmap Case for TIER State of TIER 16 Website and mail lists to be developed

17 Definition and Development Work with the Internet2 and InCommon communities to: Establish initial requirements coming out of workshops and other activities Propose first deliverables and publish for community review Develop decision, design, delivery and reporting process Move from bootstrapping to first iteration of a scalable requirements gathering, prioritization, integration/development, and release process 17

18 Questions? Comments? and thank you for being on the call. 18