Shib and InCommon
Topics • First principles • Shib 2.0 • Migration strategies • InCommon • Future of Shib Presenter’s Name
2000 First Principles • We serve the R&E enterprise and scholar • Externalize authentication from the application • While at it, try to use rich external attributes within the application for privacy and security. Presenter’s Name
2008 First Principles • We serve the R&E enterprise and scholar • Externalize authentication from the application; internalize the risk-assessment. • While at it, try to use rich external attributes within the application for privacy, security, secrecy, scaling, ease of use, efficiency, etc. Presenter’s Name
Shibboleth 2.0 • RC1 now out the door, and being heavily tested. Final release soon. • Product of the core Shib team, now spread across the US, Switzerland and the UK. • “Shib 2.0 will interoperate with other SAML 2.0 products better than they interoperate with each other.” • OpenSAML 2.0 already heavily used by Verisign, Tata , etc. Presenter’s Name
Shib and OpenId • We are discussing Shib 2.0+ containing an OpenId provider • Shib 2.0++ will contain more clever and useful integration of federated and ad hoc identity management • The OpenId platform within Shib will have a warning reminding applications to use caution in their consumption of external identities. Presenter’s Name
Missing pieces • End-user attribute release management • InfoCard? • Kludges • Dynamic metadata (not dynamic trust) • N-tier tokens • Java SP • Quick start package Presenter’s Name
InCommon • Approximately 75 members and growing steadily • On third generation of Steering Committee • Growing steadily but strangely • National Institute of Health • Student service providers • Energy Labs • Odd overlaps with state federations , etc. • Fine print continues to be challenging Presenter’s Name
InCommon Next Steps • Pending new members • MS (+Mr Bill !), Google, student service companies, medical consortia • Libraries, finally • InCommon Silver • LOA-2, • Not hard but lots of thought upfront • Rich new set of applications from NIH • Leveraged federations • Local, state, etc., single-purpose and multi-purpose • Dynamic metadata Presenter’s Name
The Future of Shib • 2.0 is a relative plateau • Service industries springing up • Shib is important enough that it needs some independence from Internet2 Presenter’s Name
Setting the direction • Options: • Apache, Kuali/Rice, Mellon, Red Hat, independent foundation, source forge, EDUCAUSE • Others? • Who decides? • Who executes? Presenter’s Name
Recommend
More recommend
