Access Federation with Tuakiri
29th Tertiary ICT Conference 2011
Sat Mandri
Project Leader
31 August 2011
Acknowledgement
Our Partners
AAF Inc, Australian Access Federation Inc
SWITCHaai, Switzerland Access Federation
Internet2
Tuakiri Team
Andrew Watson
Senior Advisor, Ministry of Science and Innovation
Nick Jones
Director, NZ eScience Infrastructure
Dr. Matt Cocker
Services Manager, The University of Auckland
Tim Chaffe
Chief IT Architect, The University of Auckland
Tim Greville
The Registrar & General Counsel, The University of Auckland
Greg Jones
Manager Information Service, Landcare Research New Zealand
Robert Gibb
Informatics Team Science Leader, Landcare Research New Zealand
Vladimir Mencl
eResearch Services & Systems Consultant, University of Canterbury
Sat Mandri
Project Leader Tuakiri, The University of Auckland
Daniela Dunn
Technical Specialist, The University of Auckland
Aaron Hicks
Technical Specialist, Landcare Research New Zealand
Attribution Share Alike
Tuakiri, New Zealand Access Federation 2011
2
Agenda
 Introduction
 Project Update
 Interim Executive Appointment
 Demo
 Service uptake
 Proposed service model
 Full Production Service
 Benefit Realisation
 Join Now
3
Introduction
Tuakiri will make sharing protected online resources easier
 Tuakiri will eliminate the need for researchers, students, and
academics to maintain multiple passwords and usernames.
 Reduced complexity for the service providers on maintenance
of the user accounts. Identity providers manage the levels of
their users' privacy and information exchange.
 Tuakiri Federation Service has deployed SAML-based
distributed authentication and authorization service
(Shibboleth® Software) to enable scalable, trusted
collaborations among its community of participants.
4
Tuakiri, NZ Access Federation
Tuakiri, New Zealand Access Federation, whose establishment is
being funded by the Ministry of Science and Innovation, will:
 provide a legal structure within which NZ’s research and
education organizations can share a set of agreed policies,
rules and identity for access to online resources.
 provide capability for secure and seamless collaboration for
the NZ Universities, Crown Research Institute by 31 July 2011.
 establish trust relationships and shared understanding of
language or terminology.
 enable people to use their home institution credentials to
connect to remote sites without revealing their credentials or
releasing unnecessary private information.
5
Enable Collaboration
Deploy SP
Join
Deploy IdP
IdM Service
University, CRI
Service
Online resource
remotely located
www.myservice.com
www.myscienceproject.ac.nz
www.nesi.org.nz
6
Why?
Some of the drivers are:
NZGL
7
Project Update
Deliverables &
Milestones
Green = Completed, Amber = Work-in-progress, Red = In pipeline
9
Interim Executives Appointed
Dr. Thomas Matthew Cocker
Services Manager
Information Technology Services
The University of Auckland
Email: m.cocker@auckland.ac.nz
Phone: +64 9 923 7075
The President
Gregory Rhys Jones
Manager Information Services &
Knowledge Management
Landcare Research New Zealand
Email: jonesg@landcareresearch.co.nz
Phone: +64 3 321 9710
Tony Li-Chung Shih
Finance & Operations Manager
Information Technology Services
The University of Auckland
Email: t.shih@auckland.ac.nz
Phone: +64 9 923 3168
The Treasurer
Sat Narayan Mandri
Project Leader, Tuakiri
Information Technology Services
The University of Auckland
Email: s.mandri@auckland.ac.nz
Phone: +64 9 923 1888
General Secretary
Director, NZ eScience Infrastructure
The University of Auckland
Email: n.jones@auckland.ac.nz
Phone: +64 9 373 7599
Executive Officer
Chief IT Architect
Information Technology Services
The University of Auckland
Email: t.chaffe@auckland.ac.nz
Phone: +64 9 923 2469
Executive Officer
Nicholas David Jones
Timothy John Chaffe
The Vice President
10
Federation service
The project delivered a significant milestone on 30 June
2011, when it launched the Pilot Federation Service to
the community during the NZ eResearch Symposium
2011 at the Otago University.
 Tuakiri TEST Federation
 Tuakiri Federation Registry
11
Service uptake “Universities”
Institutions
Dev/Test
Pilot Service
Services Enabled
Early discussion
Early discussion
Completed
T
T
IdP Deployed
Completed
IdP Deployed
DSpace
Tuakiri Wiki, KAWSG Wiki
Tuakiri VHO, BeSTGRID Wiki
SAKAI, BestChoice
Early discussion
Completed
T
IdP Deployed
T
IdP Deployed
Early discussion
12
Service uptake “CRIs”
Institutions
Dev/Test
Pilot Service
Services Enabled
Engaged with the project
Engaged with the project
Engaged with the project
Engaged with the project
Completed
T
IdP Deployed
Rackspace Mgmt
SCENZ WMS
NZVH
Engaged with the project
Engaged with the project
Engaged with the project
13
GRID Services
Service Providers
Services Enabled
NeSI Identity Service (Registration Service)
Zen Desk (Web based Helpdesk Service)
X.509 GRID Certificate Service
http://directory.tuakiri.ac.nz/TuakiriAAFdiscovery/DS
14
Service Model – working out the Future State
v0.7
Draft Status
The Plan
Planned Activities
Time lines
Tuakiri IdP deployment
Ongoing
Service marketing and sector engagement
Ongoing
Service Model – consultation period
Engage with the ICTC Group and CRITTERs Members
Sept11
Week1-2 Sept11
Interim Executive to review institution feedback, finalise and
approve service model
Week 4 Sept11
Send Tuakiri Membership letter to CIO/IT Directors/MIS/GM IT
Week1Oct11
Setup Tuakiri Entity (Incorporated Society)
Week 4 Oct11
Formalise service model and publish
Week 1 Nov11
Full Production Service Build
Send out service subscription pack to institutions
Tuakiri Subscription Service Effective from
Nov-Dec11
Week 1 Dec11
01 Jan12
16
The Approach
1) Consultation with the sector.
2) The project has carried out the analysis.
3) Not for profit, steady state service line with income derived solely
from affordable subscription fees.
4) Number of institutions the service will initially be available to, 8 x NZ
Universities and 8 x NZ Crown Research Institutes.
5) The University of Auckland, IT Services has expressed interest to
initially host the Production Tuakiri Federation Service and provide
support services. This relies on:
a) member institution support
b) service model that achieves steady-state, “breakeven”
17
SWOT
Internal
Strengths
Weakness
Small initial subscriber base
Proven technology stack
Weaker revenue stream
Globally deployed and used
Lack of funding for service support and
operational management
Safe and secure to use
75-100% institutional support is required
for long term sustainability
Opportunities
Threats
Rapid growth - education, research and
science sector
Future state – MSI sponsorship and
funding
Become a lead service for collaboration
Economic slow down, reduced sector
funding and change of prioritisation
Collaborate with global partners
Potential to diversify into related market
segments, ITP sector, Secondary School
and beyond
Negative
Positive
Excellent reputation as a service
Commercial competition - major vendors
to enter the market
Market may become price sensitive
External
18
Service Model Considerations
The following consideration were made when developing the
Service Model:
 2 x Service Model Options
 Each Service Model Option analysed with uptake scenarios
 Scenario 1 – 75% service uptake before 31 October, 2011
 Scenario 2 – 100% service uptake before 31 October, 2011
19
Full Production Service – Future State
Full Production Service
Negotiations are underway with The University
of Auckland, to build and operate the NZ
Federation as a service on behalf of Tuakiri for
a period of 3 years.
Indications are that the annual cost for the
service level specified would be $50k.
21
Benefit Realisation
1) Controlled access to protected resources
2) Deployment of standards based Identity Attributes Profile - eduPerson schema
3) eliminate the need for separate or multiple accounts to access resources
4) The home institution controls when an identity is disclosed, and how much
information is revealed
5) Build the level of institutional trust through conformance to standards, Act/s
and Law:
1) Levels of Assurance (NIST IAM Standards Guide)
2) NZ Privacy Act 1993 (Principles 11 and 12)
3) NZ Immigration Act 2009
6) Enable secure and seamless collaboration
7) Near future - enable collaboration with Australians and the EduGAIN
Community
22
Who can join?
 Who can join: an institution and/or a service provider to the
higher education and research sector.
 The institutions are required to follow and abide by:
1) the Federation Rules
2) Tuakiri Test Federation Terms of Use, and
3) Tuakiri Test and Pilot Federation Usage Policy
Become a trendsetter in the higher education and research sector,
collaborate and drive innovation
23
Connecting Virtual Communities
24
Thank you
Visit us online www.tuakiri.ac.nz
Join Now, send us an email enquiries@tuakiri.ac.nz
Contact the Project Leader: Sat Mandri, s.mandri@auckland.ac.nz
25