Case studies of insitutions and service providers that have already implemented federated technologies

Federation Resources - Case Studies

Case studies of insitutions and service providers that have already implemented federated technologies ( JISC early adopter projects, publishers etc).

Identity provider case studies

  • ASMIMA (Adoption of Shibboleth for Multiple Identity Management Applications) - Cardiff University
  • East Midlands Shibboleth Support - Nottingham Trent University
  • FEAR - Reid Kerr College
  • Gilead - University of Leeds
  • GLASS - University of Glasgow
  • KC-ROLO - Kidderminster College
  • KUSP - Kent University
  • Nabataea - Thames Valley University
  • LSIP - University of Liverpool 
  • SERAPIS - King's College London
  • ShEILAB - University of Bolton
  • ShibboLEAP  - 7 partners
  • SWISH  (South West Implementation of Shibboleth) - University of Exeter
  • UNISA 
Project Institution Summary Technical requirements Further information

ASMIMA

Cardiff University

Four major Work Packages: implementing a Shibboleth Identity Provider; using Shibboleth as an alternative to Athens for remotely accessing e-resources; exploring how Shibboleth can help joint Cardiff University/NHS staff access all resources they are entitled to; and exploring how Shibboleth can be used as an access management technique for an e-science application called BioDiversityWorld.

Novell eDirectory, DirXML, LDAP, Shib IdP,
Shib/Athens Gateway,
Citrix Service (CU/NHS),
High Availability Shibboleth extension

Project website  
Final report (PDF)    NHS case study (PDF)  
e-science case study (PDF)

Categories (Excel)
Resilience (PDF)
Test plan (PDF)

 

East Midlands Shibboleth Support 

Nottingham Trent University

The primary aim of this project was to investigate, develop, deliver, support and maintain a hosted Shibboleth capability for use by any East Midlands FE / HE Institution.

Recognising that FE institutions had a varying degree of technical skills and the migration to Shibboleth, an additional aim of the project was to produce comprehensive documentation on the installation and configuration of Shibboleth, utilising Microsoft technologies in the infrastructure and supporting products wherever possible.

Shib IdP, Shib SP, Microsoft Active Directory, CAS, Windows

Final report/ case study (PDF)

FEAR

Reid Kerr College

'Further Education Access to Resources'.  

Aimed to prove that FE colleges are capable of taking full advantage of federated access management, by installing a Shibboleth identity provider and service provider in the institution.

Shib IdP, Shib SP, Windows 2003, Microsoft Active Directory, Shibboleth-protected Moodle server

Project website 
Final report (Word)
Case study 
(online)

GLASS

 

University of Glasgow

'Glasgow Early Adoption of Shibboleth'.

The GLASS project proposed and implemented a cross-campus federated authorisation infrastructure, where the authentication information is asserted by the institution, but attributes for access to systems are maintained by, for example, individual departments. This architecture is now currently in use by all NeSC portal-based projects such as GEMEPS, nanoCMOS and VOTES amongst others.

Shib IdP, Novell, Moodle, WebSERF, LDAP

Project website

Final report (PDF)

Gilead

University of Leeds

A collaboration between Information Systems Services (ISS), the University Library and the Faculty of Biological Sciences. Project objectives: to use Shibboleth (AthensIM implementation) to authenticate access to Nathan Bodington VLE; Athens gateway for access to e-resources; Guanxi derived Shibboleth Origins to test federation arrangements between Leeds and Manchester Universities; to modify a number of existing resources to act as Shibboleth service providers.

Microsoft’s Active Directory, LDAP,
Nathan Bodington VLE, Guanxi, Athens gateway,
Athens Identity Manager

Project website 
Final report/ case study (PDF)

KC-ROLO

Kidderminster College

Aimed to setup a Shibboleth architecture between Kidderminster College, RSC West Midlands and University College Worcester to provide a long term method of sharing institutional learning resource objects. The project ended up managing a KC-ROLO federation, with 12 IdPs and 4 SPs. The Kidderminster College project team now run a support service to help insitutions with implementing federated technologies and Moodle.

Windows, Tomcat, Shib IdP, Shib SP, WebISO, Pubcookie, PERMIS, Moodle VLE, MS Active Directory, Fedora

Project website
Final report (Word)
Shib in FE (PDF)
ShibGuide v1 
(18/04/07) -Word 

KUSP

University of Kent 

'The Kent University Shibbolized Portal'.

 Project aims:

  • Creating a new Shibboleth infrastructure for the University of Kent
  • Building a Shibbolized portal (uPortal) with a Shibbolized version of a VLE (WebCT) with Single Sign-on
  • Investigate PrivilEge and Role Management Infrastructure Standards (PERMIS) for portal authorisation
  • Providing support to the partners in the University of Medway project to adopt Shibboleth

Shib IdP, Shib SP, LDAP, uPortal, WebCT

Project website

Final report (Word) 
Appendix A (Word) 
Appendix B (Word) 
Appendix C (Word) 
Appendix D (html) 
Appendix E (html) 
Appendix F (Excel)

LSIP

 

University of Liverpool

Established a local federation to provide devolved management of users from constituencies not within "normal" members of the University.

  • Successfully implemented Shibboleth SP and IdP on UNIX platforms (Solaris and Linux).
  • Successfully used Novell E-Directory for authentication and attribute repository.
  • Successfully implemented access to Athens protected resources via the Athens-Shibboleth gateway.
  • Successfully implemented the Oxford SPIE glue code for uPortal.
  • Successfully implemented and integrated both Pubcookie and Yale CAS SSO systems.

Novell e-directory, LDAP, Solaris, Linux, Pubcookie, Yale Cas, Apache, Shib/Athens gateway, Shib IdP & SP 1.2.1, Shib IdP & SP 1.3, uPortal, Blackboard VLE, IMP webmail

Project website 
Completion report (pdf)

Nabataea

Back to top

Thames Valley University

The Project aims:

  1. To provide authenticated access to internal systems by setting up and using Shibboleth

  2. To provide access to online resources, using direct Shibboleth access and the Shibboleth-Athens Gateway, while putting in place fine-grained controls to these resources through the use of user attributes.

  3. To simplify and increase the usage of key systems, such as the Blackboard VLE and the Personal Development Plan system

Shib IdP, Microsoft Active Directory, LDAP, Blackboard, Apache, Tomcat, Athens/Shibboleth Gateway

Project website

Final report (PDF)

SERAPIS

King's College London

'Shibboleth-Enabled Repository Access, Preservation and Ingest Study'.

Aimed to replace the local registration system that is currently used to manage access to the AHDS repository with a new prototype system based upon Shibboleth, in order to simplify the dissemination of resources to our users and increase interoperability with other repositories.

Also investigated the ways in which the current post-deposit ingest process workflow could be (partially) automated by using software tools with access managed by Shibboleth, and the work done in integrating Shibboleth with grid technologies.

Shib IdP, Shib SP, AHDS Catalogue, AHDS repository, LDAP

Project website

Final report (Word)

ShEILAB

 

University of Bolton

'Shibboleth Extended Implementation for eLearning'.

The purpose of the project was to implement Shibboleth Identity Provider (IdP) and Service Provider (SP) functions at the University of Bolton, investigating the set-up and support issues for a small university or college with limited resources. Using a case study built around the  MSc in Advance Microelectronics (AMI), which is a  100% online course involving partner institutions, the project explored the possibilities of using Shibboleth to support access to a rich set of e-learning resources including Citrix based CAD  tools.

Shib IdP, Shib SP, Windows 2003, Athens/Shibboleth Gateway

Project website

Final report (Word)

ShibboLEAP

London School of Economics (LSE)

Birkbeck College (Birkbeck)

Imperial College (Imperial)

King's College London (KCL)

Royal Holloway College (RHUL)

School of Oriental & African Studies (SOAS)

University College London (UCL)

The project created a Shibboleth Identity-Provider (‘Origin') service for all academic and support staff (at each of seven partner institutions in the SHERPA-LEAP consortium) who are involved in controlled access to their respective institutional Eprints servers, and will implement modifications to their respective Eprints servers to enable them all as Shibboleth Resource-Providers (‘Targets').

Eprints.org, ActiveDirectory, LDAP, Apache, Tomcat, Oracle Internet Directory, Java

Project website

Final report/ case study  (PDF)

Eprints final report  (PDF)

Birkbeck fr

Imperial fr

King's College fr

RHUL fr

SOAS fr

UCL fr

SWISH

University of Exeter

The project implemented a Shibboleth pilot service at the University of Exeter, involving registered members of the University based in Exeter, and investigate further implementation within the Peninsula Medical School (PMS) and the Peninsula Allied Health Collaboration (PAHC), and at the Combined Universities in Cornwall (CUC) campus in Cornwall. The project also nvestigated possible integration with the University portal, being developed by our XPort project, and its potential to interact with other campus services, including our VLE service and the Library Management System (produced by Innovative Interfaces).

Shib SP, Shib IdP, CAS, LDAP, WebCT, uPortal, SquirrelMail, IMAPD, Shibboleth-Athens gateway

Project website 
Final report/ case study (PDF)

UNISA

University of Nottingham

Piloted the Shibboleth/Athens gateway in service with first-year undergraduate students (IT/Library liaison, technical implementation, user documentation/education, academic support).  

AthensIM,
Shib/Athens Gateway,
LDAP, Shib IdP 1.2,
Tomcat 4.1.31,
Java 1.5,
Apache 2.0.52,
Linux

Project website 
Final report/ case study  (Word)

Back to top

Service provider case studies

Organisation Summary Links to further info

MIMAS

MIMAS is a JISC and ESRC-supported national data centre providing the UK higher education, further education and research community with networked access to key data and information resources to support teaching, learning and research across a wide range of disciplines.

PPT presentation at Educause 2006

Safari

The central aim of the project was to apply Shibboleth middleware to some of the resources that make use of the Economic and Social Data Service (ESDS)/Census Registration Service (CRS) one-stop registration system (hosted by the UK Data Archive). The project aimed to research the ways in which Shibboleth middleware could be implemented within the system, to identify, implement and test the best possible solution and finally to recommend whether, and how to, roll-out to the wider community.

Shibboleth model (the University of Alabama at Birmingham Virtual Organisation Service Provider model) that suits the central registration service scenario was found and adapted. Shibboleth middleware was applied to a number of resources using this model and, as a result, UKDA intend to go ahead with a live implementation of Shibboleth for all ESDS, CRS and UKDA resources (with a planned completion date of end of September 2006).

Project website 
Final report/ case study (PDF)

Safari specification (PDF)

Elsevier ScienceDirect

Elsevier ScienceDirect was an early adopter of Shibboleth and took part in the UK pilot federation. Jane Charlton spoke via Skype to Ale de Vries from Elsevier ScienceDirect about some of the issues around adopting this new technology and what the main benefits and challenges are for publishers and service providers.

podcast logo Download the podcast 

Read the transcript

   Back to top

Bookmark and Share