Presented at EDUCAUSE Annual Conferences and Access Control

Institutional directory service architects and designers face a number of unique technical challenges in higher education. Directory architects from the University of Southern California and the University of Maryland, Baltimore County, will share lessons learned while developing and implementing directory services at their institutions.

Topics will include designing access controls and institutional object classes; using federation identities, Shibboleth, and administrative tools; managing multiple data sources, members, accounts, and guests; mapping data sources to standard object classes; handling interactive and bulk updates; optimizing and monitoring performance, replication, and integration with external authentication systems; and managing groups and privileges.

The solutions offered are based on 14-plus years of practical experience working with the Netscape/iPlanet/Sun directory products. This seminar will focus on intermediate to advanced issues, and most information will be widely applicable to and suitable for any institutional directory effort.

This session will describe and explain the policy, practices, and technologies implemented at the University of Southern California to allow the extension of electronic services for learning, research, and collaboration to guests and colleagues at other higher education institutions.

The University of Washington faces a set of identity and access management challenges shared by many universities. The problems are numerous and familiar. To overcome these challenges, UW has implemented some novel solutions in pursuit of a vision of fully integrated authorization and identity management across the enterprise.

The University of Notre Dame recently changed its network border policy to deny most unsolicited network traffic from the Internet. A small set of services like the Web, secure shell, and VPN are allowed in, but all others are denied by default.

This session will present a survey and an informal poll of current campus network security practices and products in higher education for NAC (network access control and protection) and VoIP (voice over IP).