Blog from August, 2013

InCommon Shibboleth Installation Workshop

October 21-22, 2013
University of Nebraska-Omaha
Omaha, Nebraska
www.incommon.org/shibtraining

Need training on Shibboleth installation? Consider attending the latest InCommon Shibboleth Installation Workshop in Omaha, Nebraska, sponsored by InCommon, Internet2, and the University of Nebraska.

We’ll spend one day (October 21) installing the identity provider software, and the second day (October 22) installing the service provider software. These directed self-paced workshops allow attendees to move through the material at their own speed, while having experienced trainers provide overviews and one-on-one help with the process.

Attendance is limited to 40 registrants each day.

The workshops provide technical installation and configuration experience with Shibboleth version 2.x using a self-paced set of instructions. The workshops will offer the chance to:

  • Install either a prototype Shibboleth identity or service provider in a virtual machine environment.
  • Hear tips for configuring and running the software in production.
  • Learn about integration with LDAP directories and selected packages.

Knowledge of identity management concepts and related implementation experience is strongly recommended. Organizations are encouraged to send one or two attendees who best represent the following functions:

  • System install, integration, and ongoing support staff
  • Campus technology architects

For more information and a link to register, go to www.incommon.org/shibtraining.

To learn more about Shibboleth, see the Shibboleth wiki (wiki.shibboleth.net). More information on federated identity can be found at www.incommon.org.

InCommon Affiliate Aegis Identity Nominated for APEX Award

Congratulations to InCommon Affiliate Aegis Identity on their nomination for "technology startup of the year" by APEX, the Colorado technology industry's annual award program. Here's the Aegis announcement.

Aegis Identity Software, Inc. has been nominated for an APEX Award, Technology Startup Company of the Year. The APEX Awards recognize Colorado’s technology excellence highlighting remarkable leaders and innovators. This prestigious event has been hosted since 2001 by Colorado Technology Association (CTA) to honor the success of hundreds of deserving leaders in technology. The winners will be announced on Tuesday, September 10, 2013 during the APEX Awards gala to be held at the Hyatt Regency Hotel in Downtown Denver.

Since the program’s inception in 2000 CTA’s APEX Awards have been awarded to well-deserved technology companies and executives who lead these amazing companies. Presented in nine categories for companies and individuals, the awards recognize success, innovation, vision, leadership, excellence in innovation and community contributions.

Aegis Identity Software has built an enterprise-class software platform designed for managing digital identities in the education marketplace. This success has been demonstrated by the adoption of the technology by prestigious universities such as University of Oregon, Radford University, and Wake Forest University. Furthering this success the company has launched solutions for the full P-20 education market.

“We are honored that Aegis Identity Software was named a nominee for the Technology Startup Company of the Year recognizing technology companies and their impact on the community”, said Bob Lamvik, Chief Operating Officer, Aegis Identity Software, Inc. “Aegis Identity’s focus on providing identity management software and services to the education market positively impacts the availability of learning resources to the entire P-20 community”.

“The APEX awards recognize and showcase the best of the technology innovation and leadership in Colorado. We look to our members to nominate ideas, projects, leaders and companies from every corner of the state and Colorado’s technology industry,” said Erik Mititsek, CEO, Colorado Technology Association.

The August 2013 edition of the InCommon Update is available. In this issue:

  • Registration Open for Identity Week
  • InCommon Shibboleth Workshop Scheduled for Omaha
  • InCommon Steering Minutes Available
  • GPN/UM Dropoff Services New R&S Provider
  • Assurance Program Sets Migration Plan for Version 1.2
  • New Certificate Service Subscribers
  • New InCommon Participants

Migration Plan for New Version of Assurance Profiles

As you may recall, InCommon released a new version of the Assurance Framework and Profiles (v. 1.2) in February 2013. As a follow-on to that, the InCommon Assurance Advisory Committee and the InCommon Steering Committee have approved a migration plan for moving certified IdP Operators from v. 1.1 to v. 1.2. While this does not affect every InCommon participant, we wanted to announce this to keep everyone informed. To find out if you are affected, please review the list of certified Identity Provider Operators.

The InCommon Assurance Program currently includes two profiles, Bronze and Silver, designed to increase confidence and reduce risk for service providers, and allow for federated access to financial and health-related applications, sensitive research information, and other services that require greater confidence in an identity. For more information, please visit assurance.incommon.org.

New Service Added to Research & Scholarship Cateogy

The GPN/UM Dropoff Services has been approved as an InCommon Research & Scholarship Category service provider. GPN/UM Dropoff provides a place for the 23 member institutions of the Great Plains Network to securely transmit files between collaborators. These files often exceed 2GB in size, thus requiring HTML5 to complete successfully. While the initial file transfer is to a temporary holding area, it can be moved to a long-term repository, should that be desirable.

The InCommon R&S Category allows participating identity providers to release a minimal set of attributes to an entire group of approved services, rather than negotiating attribute release one-by-one.

With the addition of this service, there are now 13 R&S SPs. Also, 56 IdPs have indicated support for the R&S Category. A complete list of R&S services and the IdPs that support them is maintained on the InCommon web site. See the InCommon wiki for more information about the R&S Category, including application forms for both SPs and IdPs.

CommIT – Simplifying Admissions IdM

IAM Online – Wednesday, August 14, 2013

3 pm ET / 2 pm CT / 1 pm MT / Noon PT
www.incommon.org/iamonline

Have you dreamed of the day when you don't need to create credentials for every applicant to your institution? Would you like a better way to accurately and automatically match the flood of scores, grades, recommendations, and financial aid packages to the correct student?

Those are the goals of the CommIT project, and the topic for the August 14 IAM Online. CommIT strives to provide a scalable, secure approach to matching electronic records for all college applicants and institutions and the creation of a unique electronic credential to:

  • Resolve matching problems at the university level,
  • Simplify the entire application process for students, parents, colleges and universities, and their external service providers
  • Do away with the last remaining vestiges of dependency on the social security number

Join us for an overview of the project, a demonstration of the actual pilot account creation process, and an update on the current status, next steps, and how to get involved.

Speaker: Charlie Leonhardt, Georgetown University

Connecting

We use Adobe Connect for slide sharing and audio: http://internet2.adobeconnect.com/iam-online. For more details, including back-up phone bridge information, see www.incommon.org/iamonline.

About CommIT

The CommIT project was initiated by the PESC Electronic Authentication and Authorization Task Force and is now sponsored by PESC and Internet2. It relies on SAML 2.0 and Shibboleth, and depends upon InCommon as the core of its trust infrastructure.

About IAM Online

IAM Online is a monthly online education series including essentials of federated identity management, hot topics from the EDUCAUSE Identity and Access Management Working Group, and emerging topics in IAM. Experts provide overviews, answer questions and lead discussions. IAM is brought to you by Internet2’s InCommon community and the EDUCAUSE Identity and Access Management Working Group.

Registration Now Open for Identity Week

Registration is now open for Identity Week, November 11-15, 2013, held in Burlingame, California, just south of San Francisco. The event, led by Internet2, will bring together the InCommon community, identity management technical implementers and architects, and U.S. and international leaders in the field of identity and access management.

Each of the following three meetings has a separate registration, so you can choose the one(s) right for you. For links to each of these meetings, the online registration process, and the hotel registration site, please visit www.incommon.org/idweek.

Advance CAMP: Identity Services Summit (Nov. 12-13) - Leading identity architects and developers from research and education will gather and focus on the state-of-the-art in identity services and leading-edge work. Using an unconference format, those attending determine the agenda and discussion topics, providing substantial time for exploration and discussion. Details are here: https://spaces.at.internet2.edu/display/ACAMP2013/

CAMP Pre-Conference Workshop: Getting Started with Federated Identity Management (Nov. 13) - Those just getting started with identity management will be interested in this Wednesday afternoon workshop. The program will focus on the primary principles that underlie an effective identity management system, look at how federated IdM fits and why it is important, and introduce you to InCommon. There is a separate registration for the pre-conference. More information is at:
https://spaces.at.internet2.edu/display/CAMP2013/Getting+Started+with+Federated+Identity+Management

CAMP: Managing Identity and Access in an Era of Distributed Services (Nov. 14-15) - CAMP will focus on the policy and technical challenges of implementing outsourced and cloud services. CAMP includes two tracks, “Ramping Up for Distributed Services,” and “Federation and Distributed Services: What’s Working and What’s Next.” The program for both tracks is posted on the CAMP website, https://spaces.at.internet2.edu/display/CAMP2013

The week kicks off on Monday, November 11, with a meeting of REFEDS, the international organization for operators and architects of identity federations. You can find out more about REFEDS at https://refeds.org/about_agreement.html

If you have questions about Identity Week or registration, please see the FAQ on the website or contact Dean Woodbeck at woodbeck@internet2.edu.