290 likes | 441 Views
Europe Latin America Collaborative e‑Infrastructure for Research Activities A Model for Federated Services. Brook Schofield, TERENA ● Sofia, Bulgaria ● 20 th June 2014. A family of services. Worldwide eduroam status…. e duroam in production eduroam pilot Missing eduroam. Overview.
E N D
Europe Latin America Collaborative e‑Infrastructure for Research ActivitiesA Model for Federated Services Brook Schofield, TERENA ● Sofia, Bulgaria ● 20th June 2014
Worldwide eduroam status… eduroam in production eduroam pilot Missing eduroam
Overview Partners • CLARA, GARR, RNP, TERENA, RedIRIS Focus: • Promoting and consolidating the foundations for creating a framework for authentication and authorizationin Latin America, and facilitate the integration with the European initiatives under TERENA activities such as TF-EMC2 and REFEDS, and will make the necessary arrangements to join the GÉANT service eduGAIN
eduroam in Latin America Before the Project 1production deployments • Brazil, Peru Zero pilot deployments
eduroam in Latin America Year 1 of the Project 3 production deployments • Brazil, Peru, Chile 9 pilot deployments • Argentina, Colombia, Costa Rica, Ecuador, El Salvador, Mexico, Nicaragua, Uruguay, Venezuela
eduroam in Latin America Current progress… 8production deployments • Argentina, Brazil, Chile, Colombia, Costa Rica, Ecuador, Mexico, Peru 4pilot deployments • El Salvador, Nicaragua, Uruguay, Venezuela 6 Missing • Bolivia, Guatemala, Honduras, Panama, Paraguay, Guyana
Key steps • eduroam atTICAL 2012 • Regional Conference, Assess who has eduroam and who uses it • Repeat at TICAL 2013 and TICAL 2014 • Offer services via federated access/eduGAIN • FileSender, Video Conference Portal, RedCLARA Portal • Collaboration with GÉANT
Year 1 eduGAIN Participant Brazil (CAFe) eduGAIN Candidate Chile (COFRe) Pilot Federation Peru MoU Federations Argentina, Colombia, Costa Rica, Mexico Identity Federations and Latin America eduGAIN Member Joining eduGAIN Candidate Federation Pilot Federation MoU Signed
Worldwide eduGAIN status… CAFe COFRe eduGAIN Member Joining eduGAIN Candidate Federation Pilot Federation MoU Signed
Current eduGAIN Participant Brazil (CAFe) Chile (COFRe) eduGAIN Candidate Colombia (COLFIRE) Pilot/MoU Federations Argentina, Costa Rica, Ecuador, Mexico, Peru Identity Federations and Latin America eduGAIN Member Joining eduGAIN Candidate Federation Pilot Federation MoU Signed with ELCIRA
Problems and Concerns • Policy often more difficult then technical issues - Chile was 1st world wide to adopt Policy Template from GÉANT/REFEDS; • Different models of sustainability in the NRENs in Latin America; • Few technical people involved in the project; • NREN commitment/focus in setting up eduroam infrastructure ahead of AAI.
MATE run by INNOVA|RED Marco para el Acceso a la Tecnología y la Educación (MATE)Model for Access to Technology and Education (MATE) Started operation in late 2013 Joined eduGAIN in early-2014 ;-) *This is NOT their logo (nor their name)!! * MATE (Argentina)
Federating your campus systems Talk to your researchers, staff & students Investigate key services Intranet and Website Webmail Google Apps for Education, Microsoft 365 e-Learning – Moodle Talk to your librarian about Journal Access Find your own “killer app”. What to focus on?
More that one choice is good… • simpleSAMLphp • PHP • Multi-lingual support • Shibboleth • IdP is Java, SP is C/mod_shib • Runs within Apache Tomcat • PySAML2 • Python • Many plug-ins or modules available for common tools. • Benefits are greater than using LDAP.
Technology Policy Federation Development
Technology == Pilot Policy ==Production Federation Development
Technology =>Campus Policy =>NREN Federation Development
Federation Core Services “Routing” Discovery Federation “Entities” (IdPs/SPs) Shibboleth simpleSAMLphp PySAML ADFS Technology == Pilot
NREN as Federation Operator “Routing” Discovery Campus, Content Providers, Research Infrastructures Shibboleth simpleSAMLphp PySAML ADFS Technology == Pilot
Policy over business case/justification What’s important for your campus’ Waiting until … your federation in “production” or in eduGAIN …a “killer app” is found. “Other” or Future Federation Technologies OpenID Connect + OAuth are being explored. Hub&Spoke gateways already exist. What to NOT focus on?
Identity FederationsWorld Wide 31 Production Federations 17 Pilot Federations Last update May 2014
eduroam – roam across borders eduroam Pilot :-(
eduGAIN & Federations 24 eduGAIN Members 7 Joining eduGAIN 0 Candidate Federation 16 Other Federations 15 April 2014
Deploy eduroam Use it atTICAL2015 Pick a campus federation technology & Deploy an IdP PySAML2, simpleSAMLphp, Shibboleth FreeRADIUS, Microsoft NPS, other… Connect with your NREN/Fed Operator Connect with the community Country, EAP/CEENet, Europe and Globally Federate your services Next steps…
<!—Comments & Questions--> Brook Schofield schofield@terena.org