Logout Manage Profile Contact EDUCAUSE Home Page Login Contact EDUCAUSE Home Page
CAMP Shibboleth:
Enabling Campus and Federated Single Sign-On

Management Phase 2: Shibboleth as Attribute Delivery for Authorization

Session Details

Tuesday, June 27, 2006
10:15 a.m. - 11:30 a.m.
Adirondack ABC

Session Type: Management Track

Speaker(s)

  • Gabriel Lawrence, Director Data Security, University of California, San Diego
  • Renee Shuey, Principal Lead of Identity and Access Management Initiative, The Pennsylvania State University

Abstract

Often, the next step is to enable passing of attribute information about a user to an application for use in making local authorization decisions. While conceptually similar to having the application retrieve this information from an enterprise directory, using Shibboleth provides management advantages. This session will explore the changes to policy and business process related to providing this attribute data, strategies for working with the data stewards, the policies governing the release of this information, and the management of this information by applications.

Available Resources


 
© Copyright 1999-2009 EDUCAUSE