eduGAIN, Brook Schofield

Download Report

Transcript eduGAIN, Brook Schofield

eduGAIN:
Interfederation is real – what can YOU do to help?
Brook Schofield, eduGAIN Product Manager / Task Leader
Project Development Officer, TERENA
REFEDS, Dublin, Ireland
Sunday, 18th May 2014
About me…
Brook Schofield
mailto:[email protected]
skype://brookschofield
tel:+31651553991
http://terena.org/~schofield
I work at TERENA.
eduGAIN Product Manager & Task Leader in the
GN3plus Project.
Connect | Communicate | Collaborate
2
Identity Federations
World Wide
Last update May 2014
Connect | Communicate | Collaborate
31 Production Federations
17 Pilot Federations
3
eduroam Federations World Wide
Interfederated and Interoperable
eduroam
Pilot
:-(
last update April 2014, www.eduroam.org
Connect | Communicate | Collaborate
4
Global Authentication INfrastructure
Connect | Communicate | Collaborate
5
eduGAIN & Federations
1 April 2013
Connect | Communicate | Collaborate
18 eduGAIN Members
2 Joining eduGAIN
9 Candidate Federation
6
eduGAIN & Federations
1 April 2014
Connect | Communicate | Collaborate
24 eduGAIN Members
6 Joining eduGAIN
1 Candidate Federation
7
eduGAIN & Federations
15 April 2014
Connect | Communicate | Collaborate
24 eduGAIN Members
7 Joining eduGAIN
0 Candidate Federation
8
eduGAIN & Federations
15 April 2014
Connect | Communicate | Collaborate
24 eduGAIN Members
7 Joining eduGAIN
0 Candidate Federation
9
eduGAIN & Federations
18 May 2014
Connect | Communicate | Collaborate
24 eduGAIN Members
7 Joining eduGAIN
0 Candidate Federation
17 Other Federations
10
eduGAIN & Federations
18 May 2014
Connect | Communicate | Collaborate
24 eduGAIN Members
7 Joining eduGAIN
0 Candidate Federation
17 Other Federations
11
eduGAIN:
What Is it and How Does it Work?
MDS fetches, aggregates and republishes metadata
eduGAIN provides policy framework to build trust
Connect | Communicate | Collaborate
12
eduGAIN:
A more “realistic” architecture
Connect | Communicate | Collaborate
13
eduGAIN:
Some Statistics
April 2011: Official start of eduGAIN
Nov 2013: 21 Federations are members (50%) , 5 joining
Apr 2014: 24 Federations are members (51%) , 6 joining
Entities: 253 IdPs, 117 SPs (369 in total)
One IdP can represent for dozens of organisations and services
depending on federation architecture => actual numbers are higher
Whole (academic) SAML landscape:
47 Federations, 2539 IdPs, 5280 SPs (gathered from metadata)
Not all of them need to be interfederated, e.g. many internal SPs
Numbers from May 2014
Connect | Communicate | Collaborate
14
Lots of Applications  Lots of Use-Cases
Use Cases are good.
Vast variation in use case requirements aren’t.
Connect | Communicate | Collaborate
15
Brook in the Corner (on a Tuesday)
Anything I come up with just as I start
my 2nd coffee on a Tuesday
Nicole is in the office
Brook wants to talk
Just had this idea…
Don’t listen or let him talk to you!
Nicole Harris
Connect | Communicate | Collaborate
16
schacVerifiableHornLength
You can’t trust self asserted horn
length
schacHornLength  Evil
Do you really need this?
Does anyone else need this?
In theory, there is no difference between
theory and practice. But, in practice, there
is.
Jan L. A. van de Snepscheut
http://arseniic.deviantart.com/art/Fancy-Unicorn-315363946
Connect | Communicate | Collaborate
17
Lots of Use-Cases  Broad Community
Vast array of use cases.
Wide ranging support for the community.
Connect | Communicate | Collaborate
18
eduGAIN: How can YOU help?
1. Join eduGAIN (if you haven’t) and Publish entities!
2. Use existing use-cases and explore how they support your community
•
GÉANT Data Protection Code of Conduct
•
Entity Categories
3. Offer new use-cases that REALLY HELP a community
•
Flesh it out internally, via the REFEDS community and then wider
4. eduGAIN doesn’t exist in a vacuum
•
We are willing to listen to your ideas… …even the crazy ones!
Connect | Communicate | Collaborate
19
Join eduGAIN and solve problems…
Solving problems is a partnership.
Connect | Communicate | Collaborate
20
Connect | Communicate | Collaborate
www.geant.net
www.twitter.com/GEANTnews | www.facebook.com/GEANTnetwork | www.youtube.com/GEANTtv
Connect | Communicate | Collaborate
21