Transcript eduroam towards a pan-European research and education

eduroam and eduGAIN:
towards a pan-European research and
education federation
Meeting the Liberty Alliance
[email protected]
High-quality Internet for higher education and research
Federations for education
• Enable the sharing of educational resources
– Network
– Applications
• Online learning systems
• Require agreement on:
– Responsibilities
– Liability
– Technology
– Language
High-quality Internet for higher education and research
(con-)Federation for network access
eduroam
High-quality Internet for higher education and research
Users are mobile
International
connectivity
University A
WLAN
Access
Provider
WLAN
SURFnet
backbone
University B
WLAN
Access
Provider
GPRS/
UMTS
Access
Provider
Cable
High-quality Internet for higher education and research
Access
Provider
ADSL
eduroam
Supplicant
Authenticator
(AP or switch)
RADIUS server
RADIUS server
User
DB
University A
Gast
University B
SURFnet
piet@university_b.nl
Employee
VLAN
Commercial
VLAN
Central RADIUS
Student
VLAN
Proxy server
•
Trust based on RADIUS plus policy
documents
signalling
•
802.1X
data
•
(VLAN assigment)
High-quality Internet for higher education and research
User
DB
Status of eduroam
• Over 400 institutions in
Europe, Australia and Taiwan
High-quality Internet for higher education and research
USA, Sweden, Belgium
will follow shortly
•
(con-)Federation for application
access
eduGAIN
High-quality Internet for higher education and research
eduroam for application access?
European Server
.hr
.ac.uk
…
.nl
carnet.hr
Uva.nl
[email protected]
Resource
• How do these applications communicate?
• How can you protect credentials?
High-quality Internet for higher education and research
Centralise authentication: A-Select
•“Black box” that:
•Accepts many
authentication
methods
•Interfaces with many
applications
High-quality Internet for higher education and research
But…
• There are more:
– PAPI
– FEIDE/Moria
– CAS
– PingID
– PERMIS
– SPOCP
– and… Shibboleth
• Do the pieces of the puzzle fit?
High-quality Internet for higher education and research
Shibboleth
© SWITCH
• Allows institutions that belong to the same federation
to share resources
• Lingua Franca: SAML
High-quality Internet for higher education and research
eduGAIN
•
Goal: to federate federations
•
Web-services and SAML
based
•
As much as possible Shibboleth
compatible
•
4 basic interactions:
– AuthnReq/Resp
– HLSReq/Resp
– AttrReq/Resp
– AuthZReq/Resp
•
Defining parameters, protocols
and profiles
Existing solutions (Shibboleth, PAPI, A-Select etc.) will move to eduGAIN
High-quality Internet for higher education and research
Conclusions
High-quality Internet for higher education and research
Conclusions
• To err is human, to federate is divine!
• Federation for network access: eduroam
• Federation for application access: eduGAIN
• So: join AAI@EduHr and……
High-quality Internet for higher education and research
use…..
High-quality Internet for higher education and research
Turn the puzzle…
Network
Authentication
Authorisation
Login
Administration
High-quality Internet for higher education and research
(web)Application
Into…..
High-quality Internet for higher education and research
More information
• eduroam in SURFnet
– http://www.eduroam.nl
• eduroam in Europa
– http://www.eduroam.org
• TERENA TF-Mobility
– http://www.terena.nl/mobility
• Géant2 Joint Research Activity 5 (authorisation and roaming)
– http://www.geant2.net/ (click on research)
• The unofficial IEEE802.11 security page
– http://www.drizzle.com/~aboba/IEEE
High-quality Internet for higher education and research