Copyright Robert D. Losee, Dan Floyd, and Sue Ostrander 2006. This work is the intellectual property of the author. Permission is granted for this material.

Copyright Robert D. Losee, Dan Floyd, and Sue Ostrander 2006. This work is the intellectual property of the author. Permission is

granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears

on the reproduced materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish

requires written permission from the author.

University of Nebraska–Lincoln

Making Re-carding Make Money & Progress in Security

March 13th, 2006

“The Way We Were”Historical Milestones

Campus carded with photo ID, one card solution

Consolidated bill, all UNL billing on one monthly bill

All students have an ID card

Bookstore Charge program developed and launched via the “Courtesy Card”

Expansion of Ncard to all campus vendors

NU Central Administration take interest in system-wide solution

Payroll deduction for employees using Ncard

Exploration of banking partnership due to external vendor requests

Banking partnership finalized for $3.8M over 8 years

• Summer 2003

– RFI & RFP developed and released

• Fall 2003

– Proposals mailed and submitted for review, oral presentations

• Winter 2004

– Notice of Award, Board of Regents approval, re-carding begins

“The Fast and The Furious”Project Timeline

• Capture images prior to end of semester5 weeks; determined by class standing and

1st letter of last name

• Sent to off campus vendor to be printed

• Card distributed by August 1, 2004

“Psycho”Re-carding

• Exclusivity– Storefront/Branch – ATM– Financial Aid Deposits– Charge Card Programs– Branding– Faculty/Staff Mailing List

“Show me the money!”Bank Requests

“Great Train Robbery”Banking Revenues-What UNL Gets

• $3.8 million over 8 years

Initial Royalty Payment $250,000

Annual Royalty Payment $300,000

ATM Fee $96,000

Rent Revenues $15,800

Recarding Costs $40,500

Card Production Costs $9,643

• Social Security Numbers• Bogus SSN• Random ID’s• Student information system numbers (SIS)• Personnel ID• Bank card number (University owned ISO)• NU ID

“War of the Worlds”Number to use on Card

Free directory software CSO has hummed along for a couple years

“Back to the Future”LDAP Historical Milestones

Legislature threatens use of SSN’s

Review team started to determine if LDAP was wise

Hacking becomes a name for the public

Decided LDAP was way to go and selected products

Requested central administration to provide cross system ID

Set up a plan and teams

Began merging data into the system IdM registry and generating NU-IDs

• One is supposed to have a champion• One is supposed to have a strong organizational

commitment• One is supposed to have organized teams• One is supposed to have a big detailed plan• So how did we get to having one of the few

systems to create a shared identity system?

“Pulp Fiction”Right Way to Run a Big Project

“The Matrix”Building the Team

New Directory Services Team

Identity Management Work

Team

Directory Services Work Team

Application Interface Work

Team

Big Important Committee

“The Bourne Identity”Creating NU ID’s

UNL SIS

UNK SIS UNO SIS

UNMCSIS

Central’s HR

NU-TrustRegistry

• Employees– 28,000 active– 48,000 historic

• Students– UNL-305,000 (36,000 ID cards)– UNK-112,000 (6,000 ID cards)– UNO-247,000

• About 1,500 cross campus students and 500 cross campus employees.

“The Good, the Bad, and the Ugly”NU System Demographics

1. Getting rid of SSN’s

2. Having profitable partnerships

3. Become a technology leader

4. Making “Ncard, the only card you’ll need at

UNL!”

“Life is Beautiful”Objectives Met

“Animal House”Card Uses

• Sharing identity across the campus and the system

• Removal of SSN’s

• UNK has joined in banking & re-carding

• Office of Identity Management

“As Good as it Gets”Spreading the Benefit

“Yours, Mine, and Ours” Campus CCIO

Technical Steering

Team

Identity Management Work

TeamRoles

Campus CCIO’s

• Communicate, communicate, communicate…anytime, anyplace, anyway

• Invite and include…almost anyone, of interest whether they want it or not – Remember your library

“Lost in Translation”Lessons

• Don’t expect management to get excited by it – As with sewers and roads, no one gets (or wants)

their name on a sewage project– Instead emphasize that new shopping malls and

industries can go in once the sewers and roads are created

“Confessions of a Dangerous Mind”Lessons (Continued)

• Stay loose, and exploit opportunities within the context of the ID management system – Have a core technical team working to guide the

process

• Keep it cheap (use open source)

• Have campuses asking Central Administration to spend money and resources

“Reality Bites”Lessons (Continued)

• Accept limited victories as they can be powerful– Sharing only 4 fields– Let the data owners keep ownership as long as you can

• Set up simple solutions as you build momentum, e.g. incident distribution list – Set up someone in charge of incidents and reporting

“Adaptaion”Lessons (Continued)

RUN UNTIL YOU ARE TACKLED!

“Win one for the Gipper!”

• Robert D Losee [email protected]

• Dan Floyd [email protected]

• Sue Ostrander [email protected]

University of Nebraska–Lincoln