EDUCAUSE | Presented at EDUCAUSE Annual Conferences and Authentication

Architecting the Institutional Directory Service: Advanced Issues, Problems, and Solutions

drupal — Tue, 06 Nov 2007 11:04:17 -0600

Institutional directory service architects and designers face a number of unique technical challenges in higher education. Directory architects from the University of Southern California and the University of Maryland, Baltimore County, will share lessons learned while developing and implementing directory services at their institutions.

Topics will include designing access controls and institutional object classes; using federation identities, Shibboleth, and administrative tools; managing multiple data sources, members, accounts, and guests; mapping data sources to standard object classes; handling interactive and bulk updates; optimizing and monitoring performance, replication, and integration with external authentication systems; and managing groups and privileges.

The solutions offered are based on 14-plus years of practical experience working with the Netscape/iPlanet/Sun directory products. This seminar will focus on intermediate to advanced issues, and most information will be widely applicable to and suitable for any institutional directory effort.

Extending Authenticated Online Services with "Friend Accounts" at Washington State University

drupal — Tue, 06 Nov 2007 11:04:19 -0600

See how Washington State University has extended its authenticated online resources to "friends" of the university with Friend Accounts, extending identity management beyond the confines of the traditional student/employee roles. This presentation will describe the business need for Friend Accounts and will offer an in-depth look at Washington State University's solution.

Identity Management: User Awareness Is the Key to a Successful IAM Rollout

drupal — Tue, 06 Nov 2007 11:04:17 -0600

This presentation details a five-phase deployment strategy for identity and access management (IAM). IAM provides a number of capabilities, including authentication management, authorization management, user administration, resource provisioning, auditing, and reporting to create a comprehensive and efficient approach to managing identities in a heterogeneous environment.

Care and Feeding of the Institutional Directory Service: Advanced Issues, Problems, and Solutions

drupal — Wed, 18 Oct 2006 15:56:45 -0500

Directory architects from the University of Southern California and the University of Maryland, Baltimore County, will share lessons learned while developing and implementing directory services at their institutions. Topics will include designing access controls, managing multiple data sources, mapping data sources to standard object classes, designing institutional object classes, handling interactive and bulk updates, optimizing and monitoring performance, and managing groups and privileges. We will also look at administrative tools, replication, and integration with external authentication systems.

IT Security in Higher Education: A Sea Change

drupal — Wed, 18 Oct 2006 15:56:50 -0500

ECAR data from 2003 and 2005 make it possible to compare the state of IT security over a critical two-year period. The findings from this analysis are striking, revealing an organizational, technological, and behavioral sea change as U.S. and Canadian universities and colleges have significantly improved all aspects of their IT security.

True Single Signon: From Vision to Reality

drupal — Wed, 18 Oct 2006 15:56:47 -0500

Washington State University's vision for information technology is a seamless, integrated, intuitive information environment. This presentation will describe the technologies we are using to make this vision a reality across our legacy enterprise environment, legacy Web applications, new Web applications, Oracle portal, and Microsoft Sharepoint sites, all with single-user authentication.

Delegated Guest Access to Secure Networks

drupal — Tue, 01 Nov 2005 12:34:26 -0600

Security on advanced wired and wireless networks is a concern for all institutions. Intruders can cause serious operational, legal, and productivity problems. Requiring user authorization can improve security, but creates problems for legitimate uses such as visitors. This session will present a novel and secure guest access control solution implemented using 802.1x, public key infrastructure (PKI), and delegation.

Delivering Shared, Authenticated, Ubiquitously Accessible Storage via WebDAV

drupal — Tue, 01 Nov 2005 12:34:30 -0600

Open-standards Web technology allows institutions to provide storage accessible "from any place, at any time, to anyone" (with appropriately authenticated authorization). We will present and compare three universities' (Boston College; University of California, Irvine; and University of Texas at Austin) deployments of such services, based on the WebDAV protocol, to meet differing institutional needs and constituencies.

LDAP and Active Directory: Working Together to Manage Identity

drupal — Tue, 01 Nov 2005 12:34:33 -0600

Managing identities across multiple systems and platforms is challenging. Learn how the University of Calgary provides unified user authentication and authorization services across the enterprise via an integrated metadirectory built on LDAP and Active Directory.

Leveraging Guest Accounts for Ubiquitous Web Sign-On System Acceptance

drupal — Tue, 01 Nov 2005 12:34:30 -0600

We will present Cosign Friend, a scalable, flexible, and lightweight guest account mechanism implemented in conjunction with our Web single sign-on system at the University of Michigan. We address the need for guest accounts at a large university, our requirements gathering process, and the implications of our design choices.