Joint Information Systems Committee 04/09/23 | | Slide 1Joint Information Systems Committee Supporting education and research

JISC Services Briefing: Access Management

What are the benefits?

Jane Charlton, JISC

28 September 2007

Joint Information Systems Committee 04/09/23 | | Slide 2

JISC Services Briefing: Access Management

•What is Federated Access Management?

•Why change & what are the benefits?

•UK Access Management Federation

•JISC support

•Further information

Joint Information Systems Committee 04/09/23 | | Slide 3

What is Federated Access Management?

Federation: group of organisations signed up to agreed set of policies for information exchange

Access management: managing user access to resources and services

Information exchange

Institution(authenticates)

Service provider (authorises)

secure, controlled access

Joint Information Systems Committee 04/09/23 | | Slide 4

How it works

Identity Provider (IdP) Service Provider (SP)

Browser user

Joint Information Systems Committee 04/09/23 | | Slide 5

Joint Information Systems Committee 04/09/23 | | Slide 6

How it works

Identity Provider (IdP) Service Provider (SP)

Browser user

Joint Information Systems Committee 04/09/23 | | Slide 7

Joint Information Systems Committee 04/09/23 | | Slide 8

How it works

Identity Provider (IdP) Service Provider (SP)

Browser user

Joint Information Systems Committee 04/09/23 | | Slide 9

Joint Information Systems Committee 04/09/23 | | Slide 10

Joint Information Systems Committee 04/09/23 | | Slide 11

How it works

Authentication

Authorisation

Attribute Request

Identity Provider (IdP) Service Provider (SP)

Browser user

Joint Information Systems Committee 04/09/23 | | Slide 12

Joint Information Systems Committee 04/09/23 | | Slide 13

JISC Services Briefing: Access Management

Why change and what are the benefits?

Joint Information Systems Committee 04/09/23 | | Slide 14

Why change?

Federated access management offers more benefits than legacy systems

– More choice and flexibility

– More security

– Less workload

– Better user experience

Joint Information Systems Committee 04/09/23 | | Slide 15

Benefits for users

Fewer username and passwords to remember

Access anytime, anywhere

Personalisation – ‘my saved searches’, ‘my favourites’, email alerts

Personal data stored by home institution, not service provider - less need to disclose identity

Joint Information Systems Committee 04/09/23 | | Slide 16

Benefits for organisations

One username and password for multiple services (internal and external)

– potential increase in use of services

– reduces workload for organisations

More choice and flexibility

– no tie-in to one provider for software or support

– freely available open source software

Based on International standards

Joint Information Systems Committee 04/09/23 | | Slide 17

Choices

OPTION COSTS BENEFITS

1. Full member of the Federation using community supported tools

Internal effort to implement software, join Federation and manage provider attributes

No ongoing subscription costs, compliance with international standards and institutional requirements

2. Full member of the Federation using tools with paid-for support

Cost of supplier support and internal effort in liaison with supplier and Federation

Full support in implementation, compliance with international standards and institutional requirements

3. Continue with Athens or other access management solution

Continue to pay current Athens subscription and licence costs to Eduserv

Athens providers have access to Federation through the ‘gateway’, funded by JISC until July 2008

Joint Information Systems Committee 04/09/23 | | Slide 18

International take-up

Adoption of international standards for interoperability

Economies of scale: build skills-base on one technology to support wide range of customers - reduced costs in time and resources

Federations in operation: Croatia, Finland, France, Norway, Switzerland, UK, USA

Federations in development or testing: Australia, Belgium, Denmark, Germany, Netherlands, New Zealand, Spain, Sweden

Joint Information Systems Committee 04/09/23 | | Slide 19

JISC Services

Lead by example & practice what we preach

– JISC directory service

Consistency across JISC Services

Added value – can be used for many services eg. cms, wikis, blogs, email

Demonstrating JISC resources – register as an Identity Provider via legal entity

Joint Information Systems Committee 04/09/23 | | Slide 20

JISC Services Briefing: Access Management

UK Access Management Federation

Joint Information Systems Committee 04/09/23 | | Slide 21

Joint Information Systems Committee 04/09/23 | | Slide 22

The UK Access Management Federation

Launched November 2006

Jointly funded by JISC and Becta

Hosted by JANET (UK)

– Schools, FE, HE and Research

– Organisations and institutions providing services to these sectors

Policy Board (stakeholder reps)

Technical Advisory Group (all sectors)

Joint Information Systems Committee 04/09/23 | | Slide 23

The UK Access Management Federation

Federation operators, JANET (UK):

– Manage membership applications

– Verify organisations are eligible to join

– Monitor federation members

– Resolve problems within the Federation

Joint Information Systems Committee 04/09/23 | | Slide 24

Choices

Joint Information Systems Committee 04/09/23 | | Slide 25

The UK Access Management Federation

No membership fee, easy to join

Support team

– Advice and guidance for institutions and organisations

– Documentation (policy and technical)

– Training courses and workshops

www.ukfederation.org.uk

Joint Information Systems Committee 04/09/23 | | Slide 26

JISC Services Briefing: Access Management

JISC Support

Joint Information Systems Committee 04/09/23 | | Slide 27

JISC support

Funding Athens until July 2008

Funding development of Athens gateways to support inter-working between Shibboleth and Athens sites and service providers until July 2008

Support materials eg. reports, case studies, toolkits and advice

Support from Access Management Outreach Team

jisc-access-management@jiscmail.ac.uk

Joint Information Systems Committee 04/09/23 | | Slide 28

Further information

JISC

– www.jisc.ac.uk/federation

– access-management-outreach@jiscmail.ac.uk

UK Access Management Federation

– www.ukfederation.org.uk

– service@ukfederation.org.uk

– UKfederation-announce@jiscmail.ac.uk

– UKfederation-discuss@jiscmail.ac.uk

Joint Information Systems Committee 04/09/23 | | Slide 29

JISC Services Briefing: Access Management

Thank you for listening – any questions?

Jane Charlton, JISC

j.charlton@jisc.ac.uk