1 / 11

SDSS Development Federation — Next Phase

Sandy Shaw, EDINA JISC CM Programme Meeting, Windermere, 14–15 November 2005. SDSS Development Federation — Next Phase. Original project goals. Implement a development federation … … to support other CM projects … to participate in Internet2 development … to convert EDINA services

benedict-mcleod
Download Presentation

SDSS Development Federation — Next Phase

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Sandy Shaw, EDINA JISC CM Programme Meeting, Windermere, 14–15 November 2005 SDSS Development Federation — Next Phase

  2. Original project goals • Implement a development federation … • … to support other CM projects • … to participate in Internet2 development • … to convert EDINA services • Gain experience relevant to the creation of a UK production federation

  3. New goals • Work with UKERNA to ensure lessons learned in SDSS can be applied to the UK federation • Work with UKERNA to ensure SDSS members have a painless transition to the UK federation

  4. Compare and contrast • SDSS federation vs UK federation

  5. Metadata issues (multi-federation membership) • Goal is identical metadata in both (all) federations: • 1) Scopes • e.g. @ed.ac.uk or @edinburgh.ac.ukbut not both • 2) Certificates • commercial CAs accepted by SDSS should be fine • status of SDSS certificates still open • 3) Entity names • originally, appeared to be federation-relative • urn:mace:ac.uk:sdss.ac.uk:provider:identity:uni.ac.uk • preference now to use federation-independent URIs • https://idp.uni.ac.uk/shibboleth

  6. Differences • Assuming metadata is preserved, other immediate changes are trivial for members: • differences in enrolment method for new members • new mechanism for requesting amendments • new location for federation metadata • different signature on federation metadata • Policy development will bring change

  7. Impact of the transition • Modest for SDSS members • Policy for eligibility may affect new members • projects? Other ad hoc groups? • experience is that these can coexist with higher assurance members, but may be other issues

  8. Timetable • Early days • initial discussions very recent • UKERNA's initial role until April 2008 … • … but 2006 will be busy! • Transition largely transparent … • same configuration file can be used for both federations • more significant change will come with Shibboleth 2.0

  9. Work items • Work on policy to be completed (Core Middleware Advisory Board) • policy notes on SDSS document register • Tasks: • plan for federation service • automation tools for enrolment and update requests • testing the Athens gateways • scoping outsourced IdP requirements

  10. Summary • UK federation is on track • SDSS is a safe route to it • SDSS and UKERNA working to ensure smooth transition between the two … • … initially a copy & paste exercise, with later adaptation appropriate for a national service • Staged (behind the scenes) rather than Big Bang

  11. Contacts • SDSS project: http://sdss.ac.uk • Contact: edina@ed.ac.uk

More Related