trust and identity in education and research: identity for everyone (288689931)

8/20/2019 Trust and Identity in Education and Research: Identity for Everyone (288689931)

http://slidepdf.com/reader/full/trust-and-identity-in-education-and-research-identity-for-everyone-288689931 1/44

Trust and Identity in Education and Research:Identity for Everyone

Ron Kraemer, Notre Dame • Kevin Morooney, Penn State • Ann West, Internet2 • Steve Zoppi, Internet2



What is Trust and Identity in Education andResearch

( TIER)?



What is TIER

4

• A secure and privacy-preserving trustfabric for research and highereducation, and their partners T(rust)

• !anage"ent of individua# principa#s,their authentication, authori$ation, andprivi#eges %ithin or across syste" andenterprise boundariesI(dentity)

• &o""unities of students, teachers and

scho#ars interacting on a g#oba# sca#e

E(ducatio

n)

• An increasing#y virtua#, "obi#e and

g#oba# research co""unity

R(esearch

)



'u""ary What is TIER a## About?

'ustain co"ponents that %eve deve#opedtogether

*i## the gaps by providing a set of integrated

co"ponents that addresses IA! as a %ho#e+

Address co""unity reuire"ents across theco"ponents

* Inc#udes &orporate and &o""unity

artnerships



TIER vision

We be#ieve that identity %i## be a serviceWe be#ieve that it %i## be a c#oud service %ith ca"pus #oca#i$ationWe be#ieve that if %e do not deve#op it %e %i## have to accept thatso"eone e#se %i## (this "eans socia# identities)We be#ieve that e.ective co##aboration %ith partners %i## be /ey (and

that inc#udes federa# agencies)We /no% %e are at #east 0-1 years fro" achieving this vision

2



3 5



TIER 6oa# 7ni8ed (9 'ca#ab#e) !ode#

'ecure :irectory, Identity and !etadata'ervices

'ing#e 'ignon and Identity &o"ponents

Auth;(Who)

MultiFactor

Multi-Level

(Groups)

Auth<(What

)

Business

RulesEngine

/Gramm

ar

*ederated Registry(:irectory 'earch =

>oo/up)Netwo

rk!"ect

s(Files#$atase

ts#etc%)

&eople

Files /$atase

ts

No'es

Registr

ervices

- e r s i s t e n c e

a n d

R e p # i c a t i o n

ork+ow

ervices

A u t o " a t e d

- r o v i s i o n i n g =

: e p r o v i s i o n i n g a n d

R u # e s E n f o r c e " e n t



TIER !oves

fro" Investor to'ustainab#e

!ode#(*inancia#s

and



T*I an T*I*

>i"ited in &harter

+ :uration 0 years

+ 'cope Initia#Invest"entversight

The ;eed forer"anence

+ *unding (dues andfees)

+ 6overnance (Internet@ A6

"ode#)

TIER &o""unity Investor =

&ounci#

!ore to Ep#ore

• With @1 BearsRe"aining C

+ Do% shou#d %e thin/about ne% T&I"e"bers?

• Rep#ace as needarises?

• !ore structuredrene%a#?

;ote #oss of ti"e inonboarding (@ yearappoint"ent"ini"u")

• Do% do %e start up a

per"anent governancestructure?



TI#R *omm%nity Investor *o%n&il

3

• F#ara Ge#in/ova Rice 7niversity (&hair)• :ennis &ro"%e## Indiana 7niversity• Eric :enna 7niversity of !ary#and• Tracy *uthey :u/e 7niversity

• &hris Do#"es Hay#or 7niversity• Ron Frae"er 7niversity of ;otre :a"e• Fevin !orooney enn 'tate 7niversity• Gohn Feefe >afayette &o##ege• Fe##i Trosvig 7niversity of Washington

• !e#issa Woo 7niversity of regon• 'he# Waggener Internet@



+ Rescoped In&o""on 'teering *ocuses on#y on *ederation

%t%re Governan&e Str%&t%re

Internet @ Hoard of Trustees

TIER 'teering=Hoard

'ervice:eve#op"ent

'teering&o""ittee

(':'&)

In&o""on'teering

&o""ittee (I&'&)+

Eterna# Re#ations'ubco""ittee

(inc#udes"e"bers fro"

I&': and ':'&)



Mem-ers.ip an #arly/P.ase %nin" Moel

Internet@

!e"bers

$namicall

cala!le perations

Dost rgani$ationa# &apacity

'ubscriptions

9 Access*ees

:ues

&ore rogra" Ad"inistration

rogra" perationa#

Acce#eration

&apita# &a##s

,o'a ,. 0 ,..

,omorrow &1GNee'e'

rogra"articipa

nts



&urrent &o""itted articipants

nstitution Name

Hay#or 7niversityHoston 7niversity&A>TE&D (&a#iforniaInstitute of

Techno#ogy)&arnegie !e##on7niversity&ase Western Reserve7niversity&#e"son 7niversity&orne## 7niversity:u/e 7niversityDarvard 7niversity

Indiana 7niversity>afayette &o##ege>ouisiana 'tate7niversity!IT;e% Bor/ 7niversity;orth%estern

7niversity#d :o"inion

nstitution Name

ennsy#vania 'tate7niversity, The

urdue 7niversity -!ain &a"pus

Rice 7niversity

'tanford 7niversity

Tu#ane 7niversity7niversity of Ari$ona

7niversity of &a#iforniaJ Her/e#ey

7niversity of &a#iforniaJ !erced

7niversity of &hicago

7niversity of *#orida7niversity of Da%aii

7niversity of I##inois J7rbana &ha"paign

7niversity of Io%a

7niversity of !ary#and

J Ha#ti"ore &ounty

nstitution Name

7niversity of !ary#andJ &o##ege ar/7niversity of !ichigan- Ann Arbor7niversity of !issouri -&o#u"bia

7niversity of ;ebras/a- >inco#n7niversity of ;orth&aro#ina - &hape# Di##7niversity of ;otre:a"e7niversity of

ittsburgh - ittsburgh&a"pus7niversity of 7tah7niversity of Kirginia7niversity ofWashington7niversity of Wisconsin

- !adisonWashington 7niversity



rogra"

'tatus



&o""unity

Ann West(AK Trust

and

Identity)

Techno#ogy

'teve<oppi(AK

'ervicesIntegratio

n andArchitectu

re)

'ustainabi#ity

&o""unity

Engage"ent and

!e"bership

Internet@ rogra" 'upport



Tar"etin" 0

213 irst Inte"rate

Release

+ !ini"a# Insta##ation =

&on8guration 7serInterfaces

+ re#i"inaryReuire"ents %i## beset for 'ca#ab#e&onsent

+ bLective

oint In Ti"e



& r i m a r

( F o c u s

2 o r R e

l e a s e 3

&ontainer=ac/aging

AIs

Initia#

:ep#oy"ent&ontinuous

7pdate &yc#es

:ocu"entation

&o""unityIdentity

rovider?

'ca#ab#e&onsent?

7 n d e r & o n s i d e r a t i o n f o r R @



Revise Pro"ram Timeline 4%nin" Driven5

Pro"ress*omm%nities of Interest

inan&ial Tra&'in" an

Reportin"

M(6 Mana"ement*omm%nity or%m

4(nline75

Te&.ni&al Re8%irements

Revision + :ependencies

Identi8ed

+ Re#ationshipsIdenti8ed

Wor'in" Gro%ps

&o"ponent >eadershipIn-#ace and Road"ap7nder%ay

*irst T%o &orporate

artnerships• 7nicon ()

+ 'hibbo#eth

+ 6rouper

• 'pherica# &o% 6roup()

+ &"anage

.omplete

&en'ing



Meanin"f%l Impa&ts

Milestone mpact&o""unities ofInterest

*or" %or/ing groups uic/#y

*inancia# Trac/ingand Reporting

Report out on cash Mo% and proLectspend to the co""unity

!7 !anage"ent Hring in seed funding to support ear#ystages of the progra"

&o""unity *oru" Enab#e co""unity input, discussion anddecision "a/ing

Technica#Reuire"entsRevision

*ina#i$e for TIER deve#opers Enab#e bestcoherent 8rst re#ease

Wor/ing 6roups :eve#op /ey speci8cations perco""unity reuire"ents



Sponsors of t.e Wor'

*omm%nity responsi-le for 9i".er/#%&ation

stanars

Internet2 responsi-le for in%stry approa&.es

*%rrently &onvene %ner Internet2 4rat.ert.an T*I*5 0

0 -%t )it. &onne&tions to -ot. an

In*ommon



TI#R Wor'in" Gro%p Str%&t%re

(ptimi:e Approa&.;<

+ 'evera# Fey%or/ing groups %i##be co"posed of

Appointed&o""unityarticipants(Rather than

having an Npen&a##O)

+ Rationa#eEpeditious

"ove"ent usings"a##er, focused

+ pen = ub#ished

• &harter = &hair =articipants

• *oru"• 'u""aries

• *eedbac/ and Ketting(Inc#udes

Internationa# Revie%)

+ ;ote that &o""unityAdoption Wor/ing 6roupWI>> be conducted as anNpen &a##O



*omm%nity Wor'in" Gro%ps =Group A>

:ata'tructures andAIs (FeithDa$e#ton)

articipate in %or/ing groups re#ated toep#oration of :ata 'tructures and AIsco""on#y supported, i"p#e"ented andechanged bet%een A>> TIER and TIER-Re#ated &o"ponents

ac/aging and&ontaineri$ation (Gi" Go/#)

articipate in %or/ing groups re#ated toep#oration of ac/aging and&ontaineri$ation practices and proceduresco""on#y supported and i"p#e"ented inA>> TIER &o"ponents

'ecurity 9Audit articipate in %or/ing groups re#ated toep#oration of 'ecurity practices andprocedures co""on#y supported andi"p#e"ented in A>> TIER &o"ponents(I;&>7:E' N0!O I;'TR7!E;TATI; A;:RERTI;6)

7ser articipate in %or/ing groups re#ated to



Accessibi#ity articipate in %or/ing groups re#ated to ep#oration ofAccessibi#ity practices and procedures co""on#y

supported and i"p#e"ented in A>> TIER &o"ponents

:efect 9Ku#nerabi#ity!anage"ent

articipate in %or/ing groups re#ated to ep#oration of:efect !anage"ent practices and procedures co""on#ysupported and i"p#e"ented in A>> TIER &o"ponents

:ocu"ent

!anage"ent

articipate in %or/ing groups re#ated to ep#oration of

:ocu"ent !anage"ent techno#ogies, practices andprocedures co""on#y supported and i"p#e"ented inA>> TIER &o"ponents ('D7>: TDI' HE HAR:I;66R7 NAO?)

Internationa#i$ation (I;)

articipate in %or/ing groups re#ated to ep#oration ofInternationa#i$ation practices and procedures co""on#y

supported and i"p#e"ented in A>> TIER &o"ponents

artnerships and Third-artyEngage"ent

articipate in %or/ing groups re#ated to ep#oration ofartnerships and Third-arty Engage"ent practices andprocedures co""on#y supported and i"p#e"ented inA>> TIER &o"ponents

7ser Interface =7ser Eperience articipate in %or/ing groups re#ated to ep#oration of7ser Interface = 7ser Eperiences practices and

*omm%nity Wor'in" Gro%ps =Group B>



=?M> Wor'in" Gro%p Neee@

Instru"entation !onitoring,!easuring, !anaging

+ &ontinuous, !eaningfu# feedbac/

on ho% the co""unity is uti#i$ingthe co"ponents - Every%here

Tune-In tier-discussionPinternet@edu



*omm%nity Aoption Wor'in" Gro%p

Neee@&o""unity Adopter &oordination

• rocess !anage"ent

• Ear#y Adopter !anage"ent• &ase 'tudies ('uccess=*ai#ure

&riteria !easure"ent) Q&ontinuousI"prove"ent

• Training Reuired Tune-In tier-

discussionPinternet@edu



#mer"in" *omm%nity *ontri-%tion

'oon &a##ing *or

'ubLect !atter Eperts

Topic %ners

• &o""unity *oru"

• !ai#ing >ists (st Responders)




#mer"in" *omm%nity *ontri-%tion

• :ocu"entationQAuthoring, QTagging, QWritingC

• Auto"ated Test &ases

• &I (&ontinuous Integration)

Tune-In tier-architecturePinternet@edu




#mer"in" *omm%nity *ontri-%tion'oft%are 'pecia#ties

• >ogging and Instru"entation

Error=!essages='tats• Ana#ytics !a/ing Nserver-ehaustO

!ore 7sefu#

Tune-In tier-architecturePinternet@edu



International *omm%nity

*ontri-%tion'oft%are pportunities and Rea#ities

• *ederation perations

!anage"ent• 'hared *eatures

• 'hared Architectures and :ata'tructures

• *ederation Interoperationedu6AI; Tune-In tier-

architecturePinternet@edu



Wor/ in

rogress



a%n&.in" t.e Pro"ram< A 9o&

Ar&.ite&t%re Strate"y Gro%pP%lle re8%irements for t.e TI#R *omm%nity

Investor *o%n&il to prioriti:e

Ti".tene %p t.e re8%irements on&e prioriti:e so

t.ey &o%l -e "iven to )or'in" "ro%ps

Spinnin" %p t.e first )or'in" "ro%ps

9elpin" to efine t.e TI#R pro&ess an ).o oes

).at



a%n&.in" t.e Pro"ram< A 9o&

Ar&.ite&t%re Strate"y Gro%pTom Barton 6niversity of *.i&a"o

Pa%l *as'ey Internet2

Ca&o- armer Iniana 6niversity

Keit. 9a:elton 6niversity of Wis&onsin/Maison

Cim Co'l 6niversity of ir"inia

Ken Klin"ensteinInternet2

Nate Klin"enstein Internet2Ni&' Roy Internet2



TI#R Prioriti:e Re8%irements

Re8%irements 4Prioriti:e5 + https==internet@boco"=TIERInv

estorRevie%

+ Re"e"ber these? + Do% do %e bring these to aspeci8cation against %hich %ecan bui#d?

All -a&'"ro%n materials< + https==internet@boco"=TIERInvestorHa

c/ground:ocs



Re8%irements Depenen&y Analysis

&on8r"ing the >in/agesensures that %eseuence so#utions inthe right orderC

!ap &redit Feith

Da$e#ton



TI#R *omponent Ar&.ite&ts

S&ott *antor S.i--olet.

*.ris 9y:er Gro%per

Benn (s.rin; *(mana"e

Ken Klin"ensteinS&ala-le *onsent

Nate Klin"enstein *omm%nity Ientity Provier

an Person Re"istry

Keit. 9a:elton APIs an Data Str%&t%res

Cim Co'l Pa&'a"in" an *ontaineri:ation

Ni&' Roy eeration Mana"er

+ &o""ercia#artner



Staffin" Pro"ress an Priorities 4irst

Wave5

Eisting &ontracts = Assign"ents(Rene%ed)

@6rouper :ev Rep#ace"ent (:one)

0'r Technica# roLect !anager (7nder&ontract)47I=7S Techno#ogy >ead (Recruiting)17I=*ront End :eve#oper (Recruiting)

:EK=UA and ac/aging Engineer(Recruiting)

2&a"pus NEnab#e"entO (:e8ning)Infor"ation Architect (;et)



&a"pus

reparation



Release is Important

It esta-lis.es0• Ne) an &%rrent -aseline for all pro%&ts

• o%nation for f%t%re 4in&remental5 %pates an

en.an&ements

+ 'i"p#e upgrades using #atest integrationtechniues

+ 'i"p#e dep#oy"ent into a sca#ab#e environ"ent

+ Re#eases are instru"ented for continua# feedbac/and i"prove"ent of the product (Anony"i$ed

data = pt-In :ata) + AI for%ard co"patibi#ityV abstracted p#ug-in point

for co""ercia# partner integrationV fra"e%or/ forfurther inter-ca"pus co##aboration by estab#ishingco""on points for provisioning and deprovisioning

+ articipate in shared-adoption cohorts



More Ways to Prepare<

• 6p"rae to t.e &%rrent version

of Gro%per

• 6p"rae to S.i--olet. Ientity

Provier ?EF

• amiliari:e yo%rself )it. *I#R

/ TI#R/API rame)or' + TIER &o"ponents %i## have

pub#ic interfaces on these AIs

and their successors• Tra&' t.e In*ommon

eeration Interopera-ility

Gro%p + Wi## i"pact your #oca# syste"s



9elp 6s Improve an Gro)

T.an' yo% for parti&ipatin"

in toay!s sessionE

We!re very intereste in yo%r fee-a&'E Please ta'ea min%te to fill o%t t.e session eval%ation fo%n )it.in

t.e &onferen&e mo-ile app, or t.e online a"enaE



Than/ Bou



Trust and Identity in Education and ResearchIdentity for Everyone

Ron Kraemer, Notre Dame • Kevin Morooney, Penn State • Ann West, Internet2 • Steve Zoppi, Internet2

trust and identity in education and research: identity for everyone (288689931)

Documents