Autograph

Autograph is a web-based privacy mangement tool developed as part of the MAMS project. It assists federation users (staff and students) to manage the balance between preserving their privacy and gaining access to the available Service Offerings. This is achieved by informing the end user of:

1. the services offered by each Service Provider;
2. the attributes that must be released in order to access those services.

Autograph is a Java Servlet application designed to be layered on top of a Shibboleth 1.3.3 Identity Provider (IdP). Only minor modifications are required to the configuration of an IdP when installing Autograph.

Main Features

• Reads Federation metadata to determine available Service Providers, Service Offerings and required attributes.

• Can pop up before a user is redirected to the Service Provider allowing "just-in-time" configuration of attribute release (this is configurable by IdP Administrator.)

• Users can also access Autograph without visiting a Service Provider to either pre-configure Service Providers or change their decisions.

• Users can choose to block the release of an attribute and will be given instant feedback on the resulting reduction in access to Service Offerings (if any).

• Users can choose to enable a Service Offerings and thereby release all of the attributes required by that Service Offering to the Service Provider.

• Users can choose to accept their configuration for all future visits, returning to Standalone Autograph should they wish to make any changes at a later date.

Further information can be found about Service Offerings in the detailed description of Autograph.

Autograph in Action

To experience Autograph in action you can test an installation in the MAMS level 1 federation.

Step 1: Add a user to the testfed openidp:

• Go to the 'TestFed OpenIdP' register service and register a user by filling out the provided form.

Step 2: Configure your idCard with Autograph:

• Go to one of the Service Providers in the Federation (e.g. sp-dpsace1.mams.org.au ) using the 'TestFed OpenIdP'.
  

Note: You will only be redirected to Autograph when you visit the Service Provider for the first time. After that time you can change your settings by visiting Autograph directly at https://openidp.federation.org.au/Autograph/Login_AAF.

Installation

To install Autograph follow the Installation Procedure.

to top