170 likes | 288 Views
LGfL Project Report. Proof of Principle of the Shibboleth Authentication & Authorisation Infrastructure (AAI). Session contents. Drivers behind the project Methodology of the project Objectives & deliverables Work packages Participants Production infrastructure Issues to emerge
E N D
LGfL Project Report Proof of Principle of the Shibboleth Authentication & Authorisation Infrastructure (AAI) LGfL Project – workshop report
Session contents • Drivers behind the project • Methodology of the project • Objectives & deliverables • Work packages • Participants • Production infrastructure • Issues to emerge • Recommendations to Becta from the project • Key stages for the National Strategy • Becta AAI Federation ... the foundations ... • National strategy ... work packages and service elements ... • Becta AAI Federation ... the structure ... • Becta AAI Federation ... the relationships .... • National Strategy ... Phasing option ... • Post-project developments LGfL Project – workshop report
Drivers behind the project • Existing demand from LEAs and end-users • Educationally desirable for learning • Solution to overcome management issues • Emerging demand from Government • Natural progression from previous projects • Unified sign-on – LGfL • Proof of concept – Leeds / IBIS • Proof of concept worked at a technical level, however • ‘in the lab’ • single vendor only • Needed evidence that concept worked ‘in the wild’ LGfL Project – workshop report
Methodology of the project • Prince 2 approach to project • Formalised project board • Project plan • Project objectives • Project deliverables • Work packages • Staged ‘work in progress’ demos at BETT & NAACE • Quality acceptance plan and tests • External evaluation report LGfL Project – workshop report
Objectives and deliverables • Objectives: • To examine the Shibboleth model in further depth in a ‘real world’ environment • To provide additional evidence of the validity of the Shibboleth model • To identify issues arising out of this further examination • Deliverables: • a working production environment that implements the architecture for the following Shibboleth entities: origin, target and WAYF • public demonstrations of the working of this architecture • two documents that will both evaluate the above environment and identify issues that require addressing in the preparation and implementation phases of a national rollout of an AAA system based upon Shibboleth architecture LGfL Project – workshop report
Work packages • 6 packages addressing: • Production environment infrastructure • Requirements for suppliers of identity and service provider services • Demonstrations at BETT and NAACE • Contractual matters around Escrow and SLAs • Issues of security, interoperability and strategy • External evaluation LGfL Project – workshop report
Participants • Atomwide • Digitalbrain • LGfL • Becta • PenCompass • IBIS • 33 LGfL LEAs + LEAs in 9 other RBCs • Plus contact / research: • Internet2, SWITCH, FEIDE, InCommon, JISC LGfL Project – workshop report
Production infrastructure LGfL Project – workshop report
Issues to emerge • UK school sector only participant at this sector level on the international Shibboleth stage • UK school sector is fundamentally different from HE/FE • Shibboleth-compliant AAI does work in the schools’ market place • Design must be technically resilient and reliable • Trust between all participants is a major key to success • Successful implementation will not occur if left to existing market forces • Insufficient mandate / resources within RBC / LEAs to implement a national solution LGfL Project – workshop report
Recommendations to Becta fromthe project • Adopt Shibboleth as the authentication & authorisation infrastructure for UK schools and LEAs • Adhere strongly to the Internet2 version • Establish a Federation focussed on the schools’ sector • The Federation must be commercially vendor-independent • Becta should directly run or commission the Becta AAI Federation • All participating entities to be compelled to do so through a formalised set of contracts • Participating entity processes and standards should be subject to formal accreditation • All entities must comply with data and child protection principles enforced through the contracts • Adopt the submitted implementation plan and costs for the rollout of a national strategy by Becta LGfL Project – workshop report
Key stages for the National Strategy The following key stages were identified by the project to Becta: • Statement of strategic direction • Creation of the Becta AAI Federation as an entity • Sourcing of sufficient resources to guarantee delivery • Creation of the underlying services • Creation of various legal documents • Establishment of procedures • Recruitment of stakeholders • Entering into contractual agreements by various parties • Ongoing development of the Federation’s services • Interaction with national and international bodies • Provision of the operational aspects of the Federation LGfL Project – workshop report
Becta AAI Federation... the foundations... The project has submitted the following as possible foundations for the Becta AAI Federation: • Implementation plan detailed down to individual tasks • Costed proposal derived from the above implementation plan • Outline work packages for the implementation programme • Federation structures • Contractual schematic • Opportunity to phase from ‘live’ regional Federation to national roll-out LGfL Project – workshop report
National Strategy... work packages & services ... • The work packages are: • Founding the Federation • Setting the Standards • Legal and Contractual • Federation Resourcing • Federation Services • Communications • The service elements covered are: • Infrastructure integration • WAYF service • Attribute Control Authority service • Accreditation service • Support services • Management • Contractual agreements LGfL Project – workshop report
Becta AAI Federation... the structure ... LGfL Project – workshop report
Becta AAI Federation... the relationships ... LGfL Project – workshop report
National Strategy... Phasing option ... LGfL Project – workshop report
Post-projectdevelopments • LGfLaai Federation is operating at a ‘regional’ level • Further major development of the overall process, structures and documentation has taken place • Business processes have been mapped • Management database in operation • On-line, web-based service to be launched which will minimise the potential ‘paper-chase’ / e-mail overload for participating entities LGfL Project – workshop report