Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting...

13
Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter Executive Director, NISO CNI Briefing Session December 13, 2016

Transcript of Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting...

Page 1: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

GettingAccessControlFromHeretoThere:AretheRightPeopleTalkingTogether?

ToddA.CarpenterExecutiveDirector,NISOCNIBriefingSessionDecember13,2016

Page 2: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Isthisatechnicalproblemorasocialproblem?

Page 3: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

SoManyIdentityManagementEfforts

OpenIDFoundationInternet2

NISTNSTICworkInternetIdentityWorkshop

Morethan2,200identityprovidersNIHeffort

GeneralwebaccesscontrolBanking/security

Page 4: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Accesscontrolatyourinstitution

HowwelldoesyourlibraryandyourITdepartmentinteract?IsIP-basedauthenticationtheeasiestwaytoNOTinteract?

Page 5: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

IdentityManagementatyourinstitution

Page 6: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

IdentityManagementandPrivacy

SAMLbaked-inprivacyfromthestartNISOPrivacyPrinciples

Page 7: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Betteraccessmanagementcanbedonewithoutcompromisingprivacy

Page 8: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Let’slearnfromeachother

SeveralSSObestpracticeshavebeendeveloped.Let’susethem!

Page 9: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Whatmoredoweneedtodobeyondimplementandimprove

technology?Thereissomuchmoretothisthanimplementingaspec

Howdoyougetpeopletoknowaboutitandtouseit?

Page 10: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Howdowemakethisanapproacheveryonecan

implement?Noteveryinstitution/publisherhasthesamestaffing,

skills,resources.SAMLimplementationisn’tplugandplaytechnology.

Canwesustainmomentumforyears?

Page 11: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Theonlywaytogetthereistogettheretogether

Page 12: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

Let’stalk…

Page 13: Getting Access Control From Here to There: Are the Right People … · 2017-05-30 · Getting Access Control From Here to There: Are the Right People Talking Together? Todd A. Carpenter

ToddA.CarpenterExecutiveDirector

NationalInformationStandardsOrganization(NISO)[email protected]

@TAC_NISO