SLIDE 1
UF INFORMATION TECHNOLOGY
Shibboleth
Warren Curry Associate Director and Lead, Core IT – ES Alan Cook Interim Director, Student Information Systems – ES Eli Ben-Shoshan Shibboleth Technical Contact – CNS
GatorLink Authentication Using Shibboleth Peer 2 Peer August 6, - - PowerPoint PPT Presentation
GatorLink Authentication Using Shibboleth Peer 2 Peer August 6, - - PowerPoint PPT Presentation
GatorLink Authentication Using Shibboleth Peer 2 Peer August 6, 2010 UF INFORMATION TECHNOLOGY Shibboleth Warren Curry Associate Director and Lead, Core IT ES Alan Cook Interim Director, Student Information Systems ES Eli
SLIDE 2
SLIDE 3
UF INFORMATION TECHNOLOGY
Shibboleth Project Timeline
Spring 2008: Project Began Winter 2009: Initial „Go Live‟ Winter 2010: „Go Live‟ for Enterprise Apps July 2010: 250 Approved Service Providers Fall 2010: GLAuth Will Sunset
SLIDE 4
UF INFORMATION TECHNOLOGY
What is Shibboleth?
A standards-based, open-source software providing Web single sign-on across or within
- rganizational boundaries
SLIDE 5
UF INFORMATION TECHNOLOGY
Shibboleth
Allows sites to make informed authorization decisions for individual access of protected
- nline resources in a
privacy-preserving manner
SLIDE 6
UF INFORMATION TECHNOLOGY
SLIDE 7
UF INFORMATION TECHNOLOGY
SLIDE 8
UF INFORMATION TECHNOLOGY
Attribute Release
- Shibboleth is designed to provide
data about users (attributes) to authorized requestors
- Attribute Release is governed by UF‟s
Attribute Release Policy
SLIDE 9
UF INFORMATION TECHNOLOGY
Attribute Release
- Attribute Release Policy is associated
with an Application (typically a URL)
- At UF, an Application is associated
with a Responsible Party via UFID
SLIDE 10
UF INFORMATION TECHNOLOGY
www.it.ufl.edu/identity/shibboleth
SLIDE 11
UF INFORMATION TECHNOLOGY
InCommon
“The mission of the InCommon Federation is to create and support a common framework for trustworthy shared management of access to on-line resources in support of education and research in the United States.” http://www.incommonfederation.org
SLIDE 12
UF INFORMATION TECHNOLOGY
Future of Gator Link Authentication
- GLAUTH proposed sunset Nov. 1, 2010
- Password will not be collected on your
applications
- Kerberos or AD for all authentication
- New features will be added as community
needs and secure technology allows
- Listserv for this community is active
SLIDE 13