Federation news
Keep up to date
Receive the monthly newsletter by joining JISC_shibboleth_announce See the Federation website Check out the JISC Access Management blog
Highlights
Update on the Publisher Interface Study
(August 2009)
The final report from Cardiff University, looking at the issues surrounding the user experience when using federated access management has now been delivered to JISC and is set out on a wiki for community consultation. In response to the recommendations from the report, JISC intends to:
- Carry out a full public consultation on the findings of the report
- Instigate an international competition for the design of a federated log-in brand
- Develop full brand guidelines for Service Providers
- Develop an easy-install tool and guide for embedded WAYFs
We will only successfully move forward by establishing a learned consensus so we invite you to read through the report and please feel free to submit your ideas by using the comment function on the wiki or by the feedback form provided.
Publisher Interface Study
(July 2009)
Cardiff University and Kidderminster College have completed the Publisher Interface Study, which looked at how service providers implement FAM login and support discovery.
The study included workshops with end users and publishers. JISC is currently looking at the initial findings and will be opening them up to community discussion in the near future with the expectation that community agreement on a set of standards for FAM login will significantly enhance user experience.
Link to the ITT: http://www.jisc.ac.uk/fundingopportunities/funding_calls/2009/02/serviceproviderinterface.aspx
Shaping the Future of Digital Identity
(June 2009)
This month saw the formal launch of Kantara Initiative as a focal point for collaboration regarding access and identity management issues. Kantara works across the government, commercial, web and mobile arenas to address key points of interest to all those involved in identity, such as policy, privacy, interoperability, and cross-community coordination. Everyone is invited to join in, via the community mailing list or by participating in one of the Kantara groups such as the Multiple Protocol Identity Selector Group. More information about Kantara can be found on the initiative website (http://kantarainitiative.org/) and on the JAM blog http://access.jiscinvolve.org
JISC Consent Management Policies and Practice Survey
(May 2009)
JISC Legal is conducting research into “Institutional Consent Management Policy and Processes Supporting Personalisation”. The JISC-funded study is intended to assist the use of technologies which, for data protection or other legal reasons, require the consent of a user as to the release of their personal data. The project complements work being done on access management generally, and in particular, federated access management and Shibboleth.
As part of the project, JISC Legal is conducting an online survey to investigate:
• current policy and practice amongst institutions for gaining consent to the transfer of personal information to third party providers;
• the purposes for which this information is disclosed.
The survey is aimed at colleagues who deal with Data Protection, Identity Management and/or Federated Access Management issues.
The survey takes around 15 minutes to complete.
We will not disclose any of the information you supply in any way which would identify your institution. Any information you give will be used anonymously or in an aggregated form. We nonetheless ask for your contact and institution details in order to bring together multiple returns from a single institution, and to enter you in the prize draw noted below.
More information about the survey: http://www.jisclegal.ac.uk/Themes/IdentityManagement/ConsentManagementProject.aspx
Access Management Team attend Internet2
(April 2009)
Discussions at this year's Internet2 focused on the need to review the concept of a 'federation' to help support the concepts of inter-federation and identity assurance profiles.
Session write ups are available on the JISC Access Management Team blog
http://access.jiscinvolve.org/category/events/
TERENA publishes REFEDS Roadmap
(March 2009)
TERENA have recently published a roadmap for the work of REFEDS, a group of representatives from international federations working together to improve interoperability between federations. The Roadmap covers a variety of areas of importance to federated access including schemas, levels of assurance, policy, security and data protection.
For more information and to view this roadmap visit:
Terena Website - http://www.terena.org/activities/refeds/
JISC Collections Service Provider Interface Study
(February 2009)
In our ongoing work of the implementation and successful development of the Federation; JISC Collections is commissioning a study to explore the approaches taken by Service Providers to the implementation of federated access management, and its effect on the End User experience. The study will make clear recommendations regarding common terminology and practices across service provider platforms to both improve the user experience and to ensure the maximum number of successful authentications.
Further information including the full ITT can be found at: http://www.jisccollections.ac.uk/consultations.
Key roles confirmed as support for the sector
(7th January, 2009)
As part of its ongoing and long-term commitment to the implementation of federated access management across the education and research sector, JISC today announced new appointments to key roles to ensure that the sector continues to receive the support and guidance it needs.
Press release: http://www.jisc.ac.uk/news/stories/2009/01/accessmanagement.aspx
Information on individual live services is also still available at : www.ukfederation.org.uk/content/Documents/AvailableServices
Shibboleth IdP v. 2.1.1 is now available
(December 2008)
Shibboleth IdP version 2.1.1 is now available for download. This is a bug fix only release. IdP Bug fixes may be found here:
http://svn.middleware.georgetown.edu/view/java-idp/tags/2.1.1/doc/RELEASE-NOTES.txt?revision=2819&view=markup
shib-common bug fixes here:
http://svn.middleware.georgetown.edu/view/java-shib-common/tags/1.1.1/doc/RELEASE-NOTES.txt?view=log
New toolkits available
(November 2008)
(Open source SAML2 modules for Java, .NET and PHP)
Three new toolkits are now available from Denmark:
(From the web page:) Java-based SAML 2.0 reference implementation. The main component of this toolkit is a servlet filter, which can be used to protect resources. The filter automatically handles all SAML communication through the underlying OpenSAML 2.0 toolkit with a minimum of configuration.
www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oio-saml-java
(From the web page:) .Net based toolkit with a SAML 2.0 reference implementation conforming to the Danish eGov OIOSAML 2.0 profile. It is used for federation in the Danish public sector.
www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oiosaml.net
(From the web page:) Complete image of SimpleSAMLphp configured for OIOSAML (the DK public ID-fed-stuff).
www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oiosimplesamlphp
Please notice that they have released simpleSAMLphp as one of three officially recommended solutions.
'Third party providers of federated access management solutions' briefing paper - updated version now available
(10 October 2008)
Two brand new suppliers - Semantico (SP support only) & Intient. Updated information. Briefing paper
JISC confirms ongoing support arrangements for institutions and service providers
(JISC press release, 18 August 2008)
Education and research sectors prepare for access management transition
(JISC press release, 31 June 2008)
Over 500 institutions and organisations have completed the transition to a new open standard SAML compliant access management system and to the UK Access Management Federation. The federation will be providing access to approximately 8 million users across the UK. Over 90% of HE institutions and more than half of further education providers have joined the federation.
The federation now has over 150 Service Provider platforms registered with over 100 educational publishers such as the BBC, Elsevier, ProQuest, Thomson Scientific, Institute of Physics and a range of smaller publishers, such as Rock's Backpages.
Read the full press release
Federated Access: Future Directions’ Day, 30 June, Birmingham
Thank you to all the institutions that have taken part in this event, designed to help JISC plan its new Capital Programme. Presentations
Shibboleth 2.0 Installfest, 1-2 July, Birmingham
The course material and presentations are available
Joining the UK federation: Technical pre-requisites' guide
As part of the JISC support project for institutions, Cardiff University and Kidderminster College have produced the Joining the UK federation: Technical pre-requisites guide
New announcement list for publishers and service providers
(posted 4 June 2008)
There is a new announcement list specifically for publishers and service providers called jisc-shibboleth-publishers@jiscmail.ac.uk
Federated access: future directions, new JISC podcast
(posted 2 June 2008)
Listen to the podcast
Federated IP-proxy service
(posted 1 May 2008)
JISC has been exploring ways in which institutions can streamline access to all of their resources using federation-enabled IP proxy software. This software will be of particular interest to institutions that currently access resources by IP address, IP-proxy or legacy access management systems.
JISC has considered providing a national IP-proxy service to UK institutions, however following expert advice from Shibboleth Development and Support Services (SDSS) we have decided not to proceed with the development of this service due to the substantial risks involved. The report provided by SDSS documents the benefits and dis-benefits of a national IP-proxy service and is available: (Word) (PDF)
The report suggests an alternative solution could be for institutions to implement their own IP-proxy service. JISC has investigated two IP proxy software products (proprietary and open source) and further information about this is available: Proxy servers FAQ
Shibboleth 2.0 is now available
(posted March 2008)
The Shibboleth team is pleased to announce Release 2.0 of the Shibboleth system software.
Shibboleth 2.0 is a major new release that significantly improves interoperability, functionality, and manageability. It also provides more options for deployment while simplifying the installation process.
Shibboleth 2.0 now becomes the ‘current stable release’. Shibboleth v1.3.x moves from ‘current stable release’ to ‘previous stable release’ (and will still be fully supported). On May 19 (60 days after the announcement), Shibboleth v1.2.x will move from "previous stable release" to unsupported. More information
UK federation membership update
(posted 5 February 2008)
Membership of the UK Access Management Federation has more than doubled in under six months, as academic institutions across the country take advantage of new services that give students simplified access to content and resources. It has now reached the 200 mark and the number is growing fast. Read more
Third party suppliers of federated access management briefing paper
(posted 5 February 2008)
This new JISC briefing paper is aimed at UK higher (HE) and further (FE) education institutions that wish to adopt federated access management and join the UK Access Management Federation, either by using paid-for support or by subscribing to an ‘outsourced Identity Provider’. The paper provides a summary of third party solutions available and more information about the organisations that provide them. Read the paper
Invitation to apply for support from the JISC Publisher Access Management Support Project
(posted 8 February 2008)
JISC invites applications from smaller publishers for support to obtain assistance from the JISC Publisher Access Management Support Project to enable them to join the UK Access Management Federation by becoming a Service Provider (SP).
This application process is for those interested in receiving support from the JISC Publisher Access Management Support Project, with the aim of establishing their own SP, NOT to become a provider of such support.
The project will provide practical technical help in implementing an SP. No financial grant will be provided to successful publishers.
JISC will provide publisher support to successful proposals from 17 March – 31 July 2008. The deadline for applications is 12 noon on Friday 7 March 2008. Further information
JISC ITT: Publisher Access Management Support Project
(posted 8 February 2008)
JISC wishes to invite tenders for the design, development and delivery of a programme of technical support and associated technical solutions aimed at smaller publishers seeking to join the UK Access Management Federation.
This Invitation To Tender is for bidders who are interested in providing such support, NOT publishers seeking deployment support.
The deadline for proposals is 12 noon on Friday 29 February 2008. Funding of up to £105,000 (including VAT, travel and subsistence) is available for the project.
It is expected that the project will be undertaken between 10 March - 31 July 2008. More information
New JISC briefing paper for academic library staff involved in implementing federated access manageent
(posted 25 January 2008) Download paper
Eduserv and JISC understanding
(posted January 2008)
The following note documents Eduserv and JISC’s shared understanding of recent events and current positions in relation to access and identity management.
In October last year discussions began between the JISC and Eduserv regarding funding for interoperability between the UK Access Management Federation and the Athens federation. These negotiations were conducted in good faith: Eduserv and the JISC regret that it was not possible to reach a solution satisfactory to both parties.
The JISC acknowledges Eduserv’s commitment to open standards and to providing interoperability between federations. OpenAthens provides one way among several for both identity providers and service providers to engage technically with the UK Access Management Federation.
Eduserv has encouraged and continues to encourage institutions subscribing to OpenAthens formally to join the UK Access Management Federation. Announcement on the Eduserv website
JISC announces changes to its federated access management transition arrangements
(posted on 22 January 2008)
Full story
A new discussion list for library staff involved in implementing Federated Access Management
(posted on 10 January 2008)Join the list
Two reports on identity management have been published by JISC
(posted on 9 November 2007)
Following two 12-month projects to investigate identity management in higher education and the levels of assurance needed to prove an individual's identity, JISC has just published two reports which both provide important findings on higher education's current practice and approaches to identity management.
The Identity Project report reviews how identity is being addressed across UK higher education and, in more detail, at 10 representative institutions.
Levels of assurance (LoAs) are about how much proof is needed of an individual's identity to access online resources; whether via a simple user name and password or a more complex system of biometrics and tokens. The JISC report on levels of assurance looks at how LoAs can be defined, agreed and then applied to different resources.
JISC ITT: Institutional Access Management Support Project
(posted 30 October 2007)
The JISC wishes to invite tenders for the design, development and delivery of a programme of support and associated technical solutions aimed at smaller UK FE/HE institutions seeking to join the UK Access Management Federation by becoming an Identity Provider (IdP). This Invitation To Tender is for bidders who are interested in providing such support, NOT institutions seeking IdP deployment support.
Microsoft Corporation, BBC Worldwide and Atypon join the UK federation
(posted 30 October 2007)
Two major service providers have recently joined the UK Access Management Federation: Microsoft Corporation and BBC Worldwide Limited. Atypon, an important service provider for smaller publishers, such as Annual Reviews and Civil Engineers, has also joined.
The new members are planning to provide live services via the federation but this is currently work in progress.
Ebsco goes live
(posted 30 September 2007)
EBSCO are now providing a live service via the UK federation. The service provides access to approximately 250 full text and abstract & index databases from Archaeology to Zoology, serving the whole of the academic community.
EBSCO also provide a live service via the French, Swiss, Swedish and US federations.
Brunel University 100th federation member
(posted 30 August 2007)
Brunel University joined the UK federation on 23rd August. They are the 100th member. Congratulations!
Since its inception on 30th November last year the UK federation has been adding new members at a rate of over 2.5 per week. If the current joining rate continues then by the end of 2007 it will have close to 150 members.
Elsevier ScienceDirect speak about their experience for adopting the new technology
(posted 29 July 2007)
Elsevier ScienceDirect was an early adopter of Shibboleth and took park in the UK pilot federation. Jane Charlton spoke via Skype to Ale de Vries from Elsevier ScienceDirect about some of the issues around adopting this new technology and what the main benefits and challenges are for publishers and service providers.
Download the podcast Read the transcript
Access Management Programme Meeting
(Posted 30 May 2007)
In response to demand, JISC held a Programme Meeting for all those involved in federated access management. The event was held on 29– 30 May 2007 at Aston Business School, Birmingham. Programme and presentations
JISC Access Management blog
(posted 30 April 2007)
The UK Access Management Team has now got a blog. The blog is intended to be used to discuss ‘burning’ access management issues, such as accountability, as well as specific issues relevant to a particular group (e.g. e-librarians). It will also be a good place for keeping up to date with the latest news from the UK Access Management Team, such as trip reports.
Introduction to federated access management animation
(posted 30 April 2007)
JISC has developed an animation to serve as an introduction to the concept of federated access management. The animation can be viewed in several formats. View the animation.
News archive (JISC Access Management Monthly Newsletter)