Blog from October, 2011

The InCommon Steering Committee has approved a new fee schedule for 2012, increasing fees by approximately 8%. There has been no fee increase since 2010.

“We have a number of new or improved services and initiatives we believe are important to the community to roll out in 2012,” said Jack Suess, chair of the Steering Committee and vice president of information technology and chief information officer at UMBC. “We know that institutions are under intense pressure to keep down costs but felt the benefits our community will gain from the success of these initiatives necessitate the cost increase.”

The additional resources will help to support InCommon’s roll-out of the assurance program, efforts to streamline the deployment of federated collaborations and client certificates on campus, and support such technical initiatives as improved metadata management, delegated administration, and automating the support of recommended practices.

Under the new fee schedule, annual participation fees will range from $1,180 to $3,250, an approximate increase of between 7-8%. Fees are based on Carnegie classifications for higher education participants, size of staff (FTE) for research organizations, and annual revenue for sponsored partners.

Under the new Carnegie Classification system, 10 of our campuses will see an adjustment down or up in their tier. Fees for those campuses will decrease or increase according to the appropriate re-classification.

Details are available at <http://www.incommon.org/fees.html>.

The Online Trust Alliance has presented InCommon with its 2011 Online Trust Leadership Award in the “Excellence in Higher Education” category. The award recognizes InCommon for its leadership and commitment to best practices, services and technologies that enhance online trust.

The OTA (www.otalliance.org) is a non-profit organization that represents the broad internet ecosystem supporting user choice and control, protection of critical infrastructure, privacy and data governance, and promoting best practices.

The OTA press release has the details.

Comodo, InCommon's partner in the InCommon Certificate Service, has announced that it has issued tens of thousands of certificates to more than 120 colleges and universities in the first year of the InCommon Certificate Service. Comodo is a leading certificate authority and Internet security organization, providing businesses and consumers with a variety of security and trust services.

The partnership between InCommon and Comodo CA Ltd. offers U.S. higher education institutions with unlimited certificates for one annual fee, providing substantial cost and overhead savings. Subscribers may issue unlimited Secure Socket Layer (SSL) certificates, including extended validation (EV), client (personal) certificates, and code signing certificates for all of the domains they own or control such as .edu, .org, .net, .com and others.

The Certificate Service now has 131 subscribers.

http://www.comodo.com/news/press_releases/2011/09/Comodo-And-InCommon-Partnership.html

A number of print and video items from the 2011 Fall Member Meeting are now available.

You can see all of the federation and middleware sessions by using this filter.

The archived video of the InCommon Policy Forum (which includes a summary of InCommon projects and initiatives) is available, as are the notes from the session [PDF]. There are video archives from other sessions that may be of interest; see the entire Netcast schedule.

Notes from the InCommon Technical Forum [PDF] are also available.

There were certificate-related sessions:

You can also download the InCommon Update that was available at the Member Meeting. It's a quick read.

Links to all of these resources are also available on the collaboration wiki.

If you are going to the 2011 EDUCAUSE annual conference, you'll find plenty of sessions related to federated identity management.

InCommon will have two half-day Day CAMPs on the Tuesday pre-conference day: "Getting Started with Identity Management" in the morning, and "Getting Started with the InCommon Federation" in the afternoon. Both require a separate registration.

Wednesday's offerings include two poster sessions, a discussion of higher ed and the identity ecosystem (with Ken Klingenstein, Jack Suess, Rodney Petersen, Renee Shuey, and Peter Alterman), and an InCommon Update.

Here is a summary and links to the individual sessions.

Tuesday, Oct. 18, 2011

Two half-day InCommon preconference sessions:

Day CAMP: Getting Started with Identity Management (8:30 am – noon)
http://www.educause.edu/E2011/Program/SEM05A

Day CAMP: Getting Started with the InCommon Federation (1 pm – 4:30 pm)
http://www.educause.edu/E2011/Program/SEM05P

Wednesday, Oct. 19, 2011

IdM Discussion for CIOs and IT Leaders, 10:30-11:20 amhttp://www.educause.edu/E2011/Program/SESS157

A New Model for Managing the Release of Personally Identifying Information in a Federated World (poster session – 1:30-2:30 pm)
http://www.educause.edu/E2011/Program/PS072

Community Certificate Service: Cost Savings and Domain Space Control (poster session – 1:30-2:30 pm)
http://www.educause.edu/E2011/Program/PS066

IAM Discussion Group poster session, 1:30-2:30 pmhttp://www.educause.edu/E2011/Program/PS081

Department of Education Initiatives for Data and Information Protection, 2:30-3:20 pm ET [they’ll be talking about 2-factor authentication)http://www.educause.edu/E2011/Program/SESS156

Higher Education's Role in the Identity Ecosystem (3:30-4:20 pm)
http://www.educause.edu/E2011/Program/SESS045

InCommon Update: What’s New in the Community? (4:50-5:40 pm)
http://www.educause.edu/E2011/Program/UPD07

Federated Identity: A Discussion of Value Challenges, and the Future (market research night with AegisUSA and Unicon – 5:30-7 pm)
http://www.educause.edu/events/E11/MTG27

Thursday, Oct. 20, 2011

IAM Working Group Community Update, 1:30-2:20 pm EThttp://www.educause.edu/E2011/Program/SESS156

Reaching for the Silver Ring: High-Value Applications & Best Practices in IdM, 2:30-3:20 pm ET
http://www.educause.edu/E2011/Program/SESS095

Two InCommon affiliates, AegisUSA and Unicon, are holding a Market Research Night session at the 2011 EDUCAUSE Annual Conference in Philadelphia. The session takes place Wednesday, October 19, 2011, at 5:30 p.m., in meeting room 115C.

The session, "Federated Identity: A Discussion of Value, Challenges, and the Future," will feature a round-table discussion with Oleg Chaikosvky of Aegis USA, Andrew Petro and Bill Thompson of Unicon, and Ann West of InCommon. The speakers will identify the facts, perceptions, and attitudes regarding federated identity and its impact on higher education.

AegisUSA and Unicon will prepare a report, based on the information gathered at the session, which will be compiled and distributed to all registered session attendees. Details are available at http://www.educause.edu/E2011/Program/MTG27

InCommon News - October 10, 2011

InCommon includes 333 participants (233 higher ed, 14 government research centers and agencies, and 86 sponsored partners). The InCommon Certificate Service has 131 subscriber and has issued more than 26,000 certificates in its first year.

In This Issue:

  • Identity Management Governance Topic of IAM Online, Oct. 12
  • Shibboleth Installation Workshops Nov. 7-8 in Long Beach, CA
  • Populate Your Metadata UI (MDUI) Elements and Requested Attributes
  • Comodo Release: Tens of Thousands of Certificates Issued
  • Internet2 Announces Box.net, HP Services Available via InCommon
  • New Participants for September
  • Gluu, Unicon Featured Affiliates

Identity Management Governance Topic of IAM Online, Oct. 12

Join us Wed., Oct. 12 (3 p.m. EDT) for a discussion of governance approaches for federated identity management. Our panel of experts will explore a variety of governance approaches and will offer advice for getting started, gaining momentum, and sustaining efforts. See the details at www.incommon.org/iamonline.

Shibboleth Installation Workshops Nov. 7-8 in Long Beach, CA

Registration is open for the next InCommon Shibboleth Workshops, November 7-8, 2011, in Long Beach, California. The workshops provide attendees with technical installation and configuration experience with Shibboleth. For more information and to register, visit www.incommon.org/educate/shibboleth.

Populate Your User Interface Elements and Requested Attributes

InCommon will soon begin publishing web pages that draw content from the metadata. These dynamic web pages leverage user interface elements (sometimes called MDUI elements) and requested attributes in metadata to display information about each identity provider and service provider in the federation. InCommon metadata administrators can populate these elements via the administrative interface. We encourage you to submit your MDUI elements and requested attributes, otherwise, the page for your IdP or SP will display error messages. Details and examples of the new web pages are at https://spaces.at.internet2.edu/x/NbCKAQ

Comodo Release: Tens of Thousands of Certificates Issued

The InCommon Certificate Service has issued tens of thousands of certificates in its first year of operation, according to a news release issued by our partner, Comodo, a leading certificate authority. In its first year of operation, the service has issued more than 26,000 certificates for its 131 subscribers (which have registered more than 2,200 domains). Details on the service, which provides unlimited certificates for one annual fee, are at certificates.incommon.org.

Internet2 Announces Box.net, HP Services Available via InCommon

Through its new Net+ Services initiative, Internet2 announced two new partnerships for its membership: a high-performance cloud service from HP and SHI International, and an enterprise-grade content-sharing and collaboration offering from Box. Both services will be available via federated identity management through InCommon. http://www.internet2.edu/news/pr/2011.10.04.net-services.html

New Participants in September

Higher Education

  • Boston University (www.bu.edu)
  • Franklin & Marshall College (www.fandm.edu)
  • University of St. Thomas (www.stthom.edu)
  • University of Notre Dame (www.nd.edu)

Research Organizations

  • NERSC (National Energy Scientific Computing Center)
  • Open Science Grid

Sponsored Partners

  • Cincinnati Children's Hospital Medical Center 
  • JAT Software

New Research Organizations and Sponsored Partners

Cincinnati Children’s Hospital Medical Center (www.cincinnatichildrens.org)
Cincinnati Children's Hospital Medical Center serves the medical needs of infants, children and adolescents with family-centered care, innovative research and outstanding teaching programs. Established in 1883, Cincinnati Children’s is a full-service, nonprofit pediatric academic medical center. The Department of Pediatrics of the University of Cincinnati College of Medicine consists entirely of faculty from Cincinnati Children’s Hospital Medical Center.

JAT Software (www.jatsoftware.com)
JAT Software, Inc., provides year-end software and Internet hosted services for large organizations with high volume tax form needs. JAT specializes in online employee self-service solutions for electronic form distribution of W-2’s, W-2c’s, 1099’s and employee pay stubs. 

NERSC (www.nersc.gov)
The National Energy Research Scientific Computing Center (NERSC) is the primary scientific computing facility for the Office of Science in the U.S. Department of Energy. More than 4,000 scientists use NERSC to perform basic scientific research across a wide range of disciplines, including climate modeling, research into new materials, simulations of the early universe, analysis of data from high energy physics experiments, investigations of protein structure, and a host of other scientific endeavors. NERSC is a division of the Lawrence Berkeley National Laboratory and is located at the UC Oakland Scientific Facility in Oakland, California.

Open Science Grid (www.opensciencegrid.org)
The Open Science Grid (OSG) advances science through open distributed computing. The OSG is a multi-disciplinary partnership to federate local, regional, community and national cyberinfrastructures to meet the needs of research and academic communities at all scales. 

Featured InCommon Affiliates

Gluu’s Federated Identity Appliance, based on Shibboleth and identity virtualization, is an on-premise solution monitored 24×7 and supported by Gluu. Once deployed, federating with new service providers (relying parties) can be accomplished using Gluu’s web-based dashboard. The Federated Identity Appliance, by mapping identity data from existing data stores, can be deployed quickly, and addresses all the installation and operational issues of an organizational federated identity service at a predictable annual cost. The Federated Identity Appliance can be deployed as on-premise hardware or a cloud VM instance. www.gluu.org

Unicon is a leading provider of IT consulting services for the education market. Unicon works with institutions to find solutions to meet business challenges. Unicon specializes in using open source technologies to deliver flexible and cost-effective systems in the areas of enterprise portals, LMS, authentication, video, calendaring, email, and collaboration. Unicon services for Shibboleth Federated Single Sign-On Service include implementation planning, branding, installation, configuration, custom development, mentoring and support. www.unicon.net


InCommon News is published for InCommon participants and other interested parties. InCommon is an LLC of Internet2. Send feedback or comments to info@incommon.org.
This newsletter is sent to announce@incommon.org. To subscribe or unsubscribe, send an email to sympa@incommon.org with one of these messages in the subject: subscribe announce or unsubscribe announce. You can also subscribe to the InCommon RSS news feed, which includes this newsletter, by visiting www.incommon.org.