Upcoming Assurance Calls
Wed., March 4, 2015 at noon ET
George Washington University and Harvard University will share their motivations and experiences in achieving Bronze. Among other topics, they will present differing approaches to password reset and to who on their campus is certified as Bronze.
Asif Hafiz, Director, Identity and Access Management, George Washington University
Scott Bradner, University Technology Security Officer, Harvard University
Ann West, Associate Vice President for Trust and Identity, Internet2
To join, use Adobe Connect:
Wed., April 1, 2015 at noon ET
Eric Goodman, Identity and Access Management Architect, UC Office of the President, will lead a discussion on password reset issues.
Guidance for Supporting SHA-2 Signed Assertions
In June 2014, InCommon Steering approved the Alternative Means for Bronze and Silver Requirement to Discontinue SHA-1 Encryption for SAML Assertions to ease the transition for Identity Provider Operators that have been certified by the InCommon Assurance Program or are wishing to apply for certification by January 15, 2015.InCommon recently released Migrating to SHA-2 to help certified campuses support SHA-2 signed assertions.
Baseline Expectations for Trust in Federation
Baseline Expectations links and information
Baseline Expectations Foundational Document
InCommon Community Trust and Assurance Board (CTAB) Minutes Publicly Available
InCommon Community Trust and Assurance Board (CTAB) Minutes are publicly available here
The charter for the InCommon Community Trust and Assurance Board (CTAB) is here
InCommon MFA Interoperability Profile Working Group
The mission of the working group was to develop and document requirements for creating and implementing an interoperability profile to allow the community to leverage MFA provided by an InCommon Identity Provider by allowing SPs to rely on a standard syntax and semantics regarding MFA. See the working group wiki and the Final Work Products.
InCommon Silver with Active Directory Domain Services Cookbook for 1.2 Released
The final version of the InCommon Silver with Active Directory Domain Services Cookbook is available now! For an overview of the important bits, see the May 2014 webinar recording.
Reading Bronze: Understanding the InCommon Profile (recordings available)
InCommon sponsored a community reading of the Bronze InCommon Assurance Profile to aid in the understanding and intent of the requirements. There were four calls during Dec. 2013 and Jan. 2014. The calls have now concluded. Thanks to all who participated for the excellent comments and questions.
Recordings are available at this link.
Project Status: Shibboleth Identity Provider Enhancements (Multi-Context Broker)
The MCB v1.0 for development of Assurance Enhancements for the Shibboleth Identity Provider has been completed and is available now for use. For more information and a project status, see Shibboleth Enhancements - Project Status.
See news on the Multi Context Broker.
See slides from IAM Online on the Multi-Context Broker (April 30, 2014)
Webinars and Presentations