Diego R. Lopez, RedIRIS JRES2005, Marseille Cork, May 2009 Welcome to EuroCAMP Plus Some Introductory Matters
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Diego R. Lopez, RedIRIS
JRES2005, Marseille
Cork, May 2009
Welcome to EuroCAMPPlus Some Introductory Matters
EuroCAMP. Cork, May 2009
The Middleware Mantra
• Any conceivable networked service needs some basic services to run
Access controlLocationAccountingMessage passing. . .<Put your desperate need here>
• And this happens at all levels
EuroCAMP. Cork, May 2009
Why Middleware Is Cool
• The base for any network service
• A way for innovation at reasonable costs
Software intensive
OSS is common place
• The core for inter-institutional collaboration
Bologna is the word
EuroCAMP. Cork, May 2009
Layering
• Core middlewareProviding the foundation services to any other layer
• Service middlewareOffering a set of common services required by applications by means of standard mechanismsProviding resources similar to those provided by operating systems.
• Application middlewareSpecifically oriented to concrete domains to offer common APIs to be used by solutions developers.
EuroCAMP. Cork, May 2009
Core Middleware
• TrustHow can I know this is good?PKI is king
• MessagingHow can I send this?SOAP, REST, XMPP,…
• IdentityHow can I know who is behind this?LDAP, PKIX, SAML,…
EuroCAMP. Cork, May 2009
Identity Service Middleware
• (Meta-)DirectoriesEnable locationData aggregation
• SSOBetter user experienceSimpler application deployment
• FederationsExtended trustSimpler collaboration
Peter Steiner. The New Yorker, 5 julio 1993
EuroCAMP. Cork, May 2009
The Trust Issue
• PKIOne way or another
IdP SP
uma.es
RedIRISCA
rediris.es
RedIRISCA
Can I trust this SP and send data about my users?
Can I trust this IdP and accept the data it sends?
Identity Request
Identity Response
Metadata
EuroCAMP. Cork, May 2009
The Identity Flow
• SAML is the lingua francaSAML1 in early adopters (evolving)SAML2 everywhere
EuroCAMP. Cork, May 2009
Peeling the Identity Onion
• Talking about abstract data representation
• LDAP currently seems the most sensible choice Basic schemas
(person, inetOrgPerson,organizationalPerson)
eduPerson
schac
iris-*
Localschemas
EuroCAMP. Cork, May 2009
The Current Landscape
• IdM, SSO and federations are maturing
Still in their early teensAbundant weaponryProtocols, schemas and tools
• All big guys play the gameSoftware providersService providers
• Part of the service portfolio of almost all NRENs
And GÉANT
EuroCAMP. Cork, May 2009
The Current Workplaces
• Many silos still persistProxying as a last resort
• Reaching beyond the Web
It is not only WSThe uSSO Theory
• Fulfilling the federation promise
Confederation and interfederationLevels of assuranceAdditional data sourcesNeutral application access
EuroCAMP. Cork, May 2009
The EuroCAMP Goals
• TrainNot only the audienceIt has to be bi-directional
• StrengthenPrinciples we agree uponTies among us
• RecruitThe community needs youAnd the office is always open
• Enjoy and be goode™
Related Documents
