paul caskey technology architect [email protected] june 21, 2007 the university of texas system...

9
Paul Caskey Technology Architect [email protected] June 21, 2007 The University of Texas System Federated Identity Management Initiative https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Upload: shaniya-sowle

Post on 01-Apr-2015

222 views

Category:

Documents


4 download

TRANSCRIPT

Page 1: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

Paul CaskeyTechnology [email protected]

June 21, 2007

The University of Texas System

Federated Identity Management Initiative

https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Page 2: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

2https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Where we are

Page 3: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

3https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Who we are

Page 4: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

4https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Who we are (cont)

• Nine academic universities

• Six health institutions

• $10 Billion Operating Budget (FY 2007)

• $1.7 Billion in research

• More than 80,000 employees

• More than 190,000 students enrolled

• Educates more than one-third of the state’s undergraduates

• Educates nearly three-fourths of the state’s health professionals

Page 5: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

5https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

A Chronology of IdM in the U.T. System…

• Impetus Need to collaborate Regulations / Security Statement of Direction

“…deployment of a robust, secure, interoperable infrastructure for identity management in support of inter-institutional collaboration is a strategic goal. ”

Vision Statement“All University of Texas students, faculty, and staff are able to access both local and remote resources using their local credentials and attributes, through a seamless technology infrastructure.”

• NMI “Extending the Reach” Grant

• Shibb-fest / Pilot federation 7 IdPs initially All 16 within 2 years Started with low-risk apps

Page 6: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

6https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

A Chronology of IdM in the U.T. System… (cont)

• Policies / Governance IdM Governing Board MOP FOP Charter, Member Agreement, Attributes, Fees

• Roadmap Built around 3 main areas: Policy, Technology, Governance

(https://idm.utsystem.edu/IdentityMgmtpage4.pdf)

• Production Legal agreements signed ~10 apps Working on audit plan

Page 7: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

7https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

Lessons Learned

• Identity management is not an “I.T. problem”.

• Policy and governance, done right, take considerable time.

• It’s easier to sell something tangible.

• It’s important to address the need for “federated support”.

Page 8: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

8https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt

The Future?

• New Apps / Shared Services! Grid access Medical Forensics Benefits ERP?

• Apps starting to consume more attributes AuthZ User convenience

• What attributes, what vocabulary?

• LoA gaining in importance

• Interfederation a real need

Page 9: Paul Caskey Technology Architect pcaskey@utsystem.edu June 21, 2007 The University of Texas System Federated Identity Management Initiative

Paul CaskeyTechnology [email protected]

June 21, 2007

Thank You!

https://idm.utsystem.edu/downloads/APAN-UTsys-June07.ppt