The Shibboleth installfest is designed to familiarize attendees with the concepts involved in federated identity, and Shibboleth, a specific software package that is widely used by organizations for federated identity. Upon completion of the training, a participant can expect to understand the installation and configuration of a Shibboleth Identity Provider (IdP), how it might be integrated into the local and global environment, and the security and scaling issues involved in productionalizing the service.
The session will begin with an introduction to federated identity and the protocol and standards commonly used. The architecture of Shibboleth in particular will be covered next, with emphasis on how it may be integrated into sources of user information on one end and applications on the other. Participants will then be asked to install and configure the IdP on a VM, integrate that IdP with either a test KDC or LDAP directory, and use that IdP to access a test resource.
Integration of the IdP with other identity infrastructure, such as a PKI, will be covered as well. Finally, we'll generally cover how the Shibboleth IdP's can be connected to applications, though we will not perform such integration during this installfest.
Plenty of time and expertise will be available for questions surrounding the security, trust, and applicability of federated identity for the wide variety of applications and needs in the DoE Lab environment.
Chaired by:
Mine Altunay & Mike Helm
Dinner
3/30/2010 Ariya Thai Sushi at 6:30PM in Warrenville. Dinner will be served buffet style and will cost $14.99/person which includes drinks and appetizers. (Vegetarian and non-vegetarian selections have been made).