Federated User Management in a ... - Welcome to INSPIRE · Providing centralIT components for Saxon administrations and authorities ... I to promote the exchange and sharing of spatial

Federated User Management in a Federated Government –

SAML 2 for the SDI of the Free State of Saxony (Germany)

INSPIRE Conference 2012, Istanbul

I Spatial Data Infrastructure of the Free State of Saxony

I E-Government Base Components for Spatial Information

(GeoBAK 2.0)

I Use case – exchange of protected spatial information in the

Saxon SDI

I Technical implementation based on SAML 2

I Demo

Contents

| INSPIRE Conference 2012, Istanbul | Andreas Hergert (GeoSN) and Rüdiger Gartmann (con terra)

GeoSN,H

ergert

con terra,

Gartmann

SDI of the Free State of Saxony

Saxon SDI as part of the German and European SDI

Saxony - overview

→ area: 18 400 sq km

→ population: 4.2 million

→ capital: Dresden

→ 13 administrative districts

→ 455 municipalities

→ ca. 60 Federal State Authorities

→ 216 000 employees in public

service

5 | INSPIRE Conference 2012, Istanbul | Andreas Hergert (GeoSN) and Rüdiger Gartmann (con terra)

Driving Forces

E-Government

• Saxon E-Gov. Strategy

INSPIRE

• INSPIRE Directive

• Saxon SDI Law (SächsGDIG)

Overview on published spatial information

Metadata of spatial information resources

I ca. 4400 metadata sets in the Saxon metadata catalogue

I incl. 4 harvested catalogues of other organisations

Spatial data (according to INSPIRE Monitoring 2011)

I 340 data sets

I 90 services

I 75 view services (OGC WMS standard)

I 15 download services (OGC WFS standard)

No protected services

available on the Internet

, yet !!

Main stakeholders

SDI Coordination Centre

spatial data holding

bodiesusers

• Saxon State Spatial Data and Land

Survey Corporation (GeoSN)

• federal state authorities

• local and municipal authorities

• scientific organisations

• corporations with public tasks

• authorities

• business organisations

• citizens

GeoSN - overview

Staatsbetrieb Geobasisinformation und Vermessung Sachsen (GeoSN) =>

“Saxon State Spatial Data and Land Survey Corporation“

I federal state authority for land surveying and cartography in Saxony

I In the area of responsibility of the Saxon Ministry of the Interior

I located in the city of Dresden

I ca. 260 employees

Land surveying and

cartography

role of a

spatial data holding body

data producer

orthophotos, topographic maps,

cadastral parcels …

Spatial data

infrastructure

role of the

SDI Coordination Centre

IT service provider

geoportal, spatial data server,

metadata catalogue …

GeoSN – tasks and duties

GeoBAK 2.0

Providing central IT components for Saxon administrations and authorities

I to promote the exchange and sharing of spatial information in the Saxon

I to support Saxon spatial data providers to fulfil their obligations regarding

INSPIRE and E-Government

I to reduce redundant setup of components (to achieve economic efficiency)

Base Components for Spatial Information (GeoBAK 2.0)

Objectives

| INSPIRE Conference 2012, Istanbul | Andreas Hergert (GeoSN) and Rüdiger Gartmann (con terra) 11

Subcomponents / Applications

Geoportal

Metadata

CatalogueMap Viewer

Service Monitor

Spatial Data Security

Spatial Data Server

Spatial Data Processing

Spatial Data Store

Spatial Data Security component

Objectives and functionalities

I to protect spatial data services (to control access)

I to enable cross-component authentication (within the Geoportal and

other GeoBAK user clients)

I to integrate existing user directories of Saxon SDI stakeholders (esp. of

the Saxon state and local authorities )

I to enable single sign on (cross-domain authentication) within the Saxon

and German SDI based on the SAML 2 standard

I Software

I securityManager, Active Directory (incl. ADFS) ...

Access management federation principle

Organisation A

(GeoSN)Organisation B

(Administrative District of

Central Saxony)

IdP = Identity Provider

SP = Service Provider

Authenticate

at Identity Provider

Access

protected Service

Use Case – exchange of protected information in the Saxon SDI

local administration(district administration and municipalities)

Exchange of protected information in the Saxon SDI

Initial situation

Administrative District

of Bautzen

state administration(state agencies and public enterprises)

GeoSN (SCC)

of Central Saxony

other local

admin.

other State

Agencies

Environmental

Agency

IdPIdP IdP

SPSPSP

Federation

local administration(district administration and municipalities)

Exchange of protected information in the Saxon SDI

Use Cases

of Bautzen

state administration(state agencies and public enterprises)

GeoSN (SCC)

of Central Saxony

other State

Agencies

Environmental

Agency

IdPIdP IdP

SPSPSP

other local

admin.

Federation

GeoSN (SCC)

INSPIRE

ServicesINSPIRE

Services

Technical Basis

❙ SAML 2.0 supports cross-domain identity federation

❙ Distributed Identity Provider (IdP)

❙ Distributed Service Provider (SP)

❙ Federation is organised by SAML metadata

❙ Describe all entities within the federation

❙ Define a trust relationship

❙ Result: Each user is authenticated for each resource

The Power of SAML 2.0

Organisation A

(GeoSN)Organisation B

(Administrative District of

Central Saxony)

IdP = Identity Provider

SP = Service Provider

How does it work?

Request

Authenticated?

IdP SelectionLogin Token

Request

Result

| 24.11.2011 | Andreas Hergert19

I Andreas Hergert

I Staatsbetrieb Geobasisinformation und Vermessung Sachsen (GeoSN)

I E-Mail: andreas.hergert@geosn.sachsen.de

I Rüdiger Gartmann

I con terra - Gesellschaft für Angewandte Informationstechnologie mbH

I E-Mail: r.gartmann@conterra.de

Contact information

Federated User Management in a ... - Welcome to INSPIRE · Providing centralIT components for Saxon administrations and authorities ... I to promote the exchange and sharing of spatial

Documents

Anglo Saxon Britain the Anglo Saxon Language

Anglo Saxon Tinderbox

Anglo saxon literature

Checklist- Medication Administrations

RECENT ADMINISTRATIONS

Student Edition SAXON MATH Saxon 65 student...permission of....

Interoperability Solutions for public...

Anglo-Saxon Language and Traditions in...

Anglo Saxon Britain Anglo Saxon Nomenclature

01Anglo Saxon

Taft & Wilson Administrations

Saxon List1

Anglo Saxon Britain Anglo Saxon Influences in Modern Britain

2009.05.06 - Saxon

Anglo Saxon FAQs

Benchmarking of Tax Administrations sound performance...