Exercises

Design

Goal - Best practice design for authentication and authorisation (IAM) directory provisioning.

• Business Cases
• Group questions
• Requirements Analysis
  • Goals
  • Matrix
  • Solutions
  • Time - Cost - Features

• Considerations
  • Choosing a unique key/identifier
  • Choosing a directory structure
  • Directory Schema
  • Delegated Administration
  • Providing access/accounts to guests

• Best Practice Documents
  • Identifiers, Authentication, and Directories - Best Practices for Higher Education
  • George Town University LDAP recipe
  • LDAP Groups Best Practice

Implementation

Phase I - Infrastructure Subsystems

Goal - To provide a central directory authoritive source for identity information.

• LDAPS
• [[DirectorySchema][]]

• Workshop Environment
  • Operating Systems
    • Installing Solaris
    • Installing Fedora
    • Installing Windows Server^?
  • Directory Servers
    • Installing Sun Directory Server v5.2
    • Installing Novell eDirectory

Phase II - Middleware

Goal -

• Installing Shibboleth
• Single Sign-on
  • Sun Java SSO (going Open Source)
  • Sun Identity Manager
  • MS Identity Infrastructure Services
• Portals
  • uPortal
  • OpenACS
  • Sun Portal Server

Phase III - Applications

Goal -

* Linking DSpace * Choosing applications

Federation

• Why use Shibboleth?^?
• Identity Provision^?
• Service Provision