Program

7:00-4:30 

Registration Open 

7:30-8:30

Continental Breakfast for Pre-meeting Seminar Attendees 

8:30-11:30

The Big Picture: Introduction to Federated Identity Management

11:30-1:00 

Lunch for Pre-meeting Seminar Attendees 

7:00-4:30 

Registration Open 

1:30- 1:45

Welcome and Introductions 

1:45-2:15

Hot Topics: Setting the Stage
Kicking off the meeting, this session will provide an overview of identity and access management across higher education and a discussion of the current issues and drivers as well as terminology. The speaker will conclude with suggestions of how to make the most out of the CAMP.

2:15-3:15

Who is Doing What? Rapid-Topic Deployment and Lightning Round

Want to find a colleague to share notes with on a sticky issue? Looking for collaborators to test a solution? Have a modest success or spectacular failure to share? CAMP attendees are invited to present short five-minute call to action or project summaries to get things started.

3:15 - 3:30

Break

3:30-5:00

Guest and Affiliate Systems: Do We Need Them Anymore?
Social Identity and Its Impact on Campuses

Enabling collaborators and other guests to use our systems in a scaleable and secure way has been a thorny issue since the dawn of time. Some of us have developed separate guest systems, just to manage the access issues. But could social identity approaches like Facebook Connect or OpenId provide a solution? And if these methods are viable, what are the policy, security and management concerns for leveraging a credential provider we don't control? This panel session will provide case studies for various design approaches and discuss their implications on campus policy, practice and technical architecture.

5:30-7:00

Reception 
Enjoy your favorite beverage and a bit of cheese and compare notes with your colleagues on your identity management plans. Find out about third-party support options from the InCommon Affiliates.

7:30-4:30 

Registration Open 

Registration Open

7:30-8:30

Breakfast

Breakfast

8:30-10:00 

IAM: Overview of Working Parts
and Self-Assessment Exercise 

Have questions about how the different aspects of Identity and Access Management all fit together (policy, business practices, technical infrastructure)? Ever wonder how your institution compares to others in IAM capabilities?  This session will help you begin to develop a gap analysis of IAM for your institution.

Recommended Federation Practices:
Identity Providers

Managing identity information within a federated environment can be challenging.  Members of the InCommon Technical Architect Group will share information and experience on best practices for Identity providers. This session will include discussions on eduPersonTargetedId, the Participant Operational Practices (POP), supported software and SAML 2.0.
   

10:00-10:15 

Break

Break

10:15-11:30

IdM Software: Strategies for
Choosing Suites

Looking for a vendor product or suite to integrate your Identity and Access Management infrastructure?  Or maybe just some open source tools to use in building or enhancing your own?  This session will help you determine which options are available to you as presenters describe their decision-making process and the products chosen.

Federation Experiences:
Service Providers

Have trouble knowing what attributes you can request from identity providers? Challenges for Service Providers in a federated environment can be much different than those experienced by Identity Providers. This session will include case studies from InCommon Service Providers sharing their experience with leveraging identity provider attributes, seamless integration of current and future services and managing multiple federations.

12:15-1:00

InCommon Certificate Program: Campus Case Studies

Interested in learning about case studies on using digital certificates and the InCommon Certificate Program? Join us in the main session room for a brief overview and campus experiences.

1:00-2:15

Building Blocks for
Access Management:
Setting the Stage 

Do you have a set of rules or policies that are used to determine who gets access to your resources?  If not, this session will highlight the steps you might go through with campus stakeholders, to analyze your existing environment and plan for automated provisioning of access.

Note that the afternoon sessions in this track are connected, in terms of topics.

Identity Assurance Profiles (IAP):
InCommon Bronze and Silver

Federated Service Providers (SPs) and their applications have varying degrees of risk and the ability/willingness to absorb that risk.  Silver and Bronze are the InCommon Identity Assurance Profiles (IAP) that provide a higher degree of trust based on Identity Provider processes, policies, and technologies. This session will discuss the current InCommon IAP Program, changes to the identity assurance IAP and Identity Assurance Assessment Framework (IAAF) documents and important drivers for the adoption of IAPs.

2:15-2:30

Break

Break 

2:30-3:45

Building Blocks for
Access Management:
Groups, Roles, Entitlements

This session presents case studies of managing the information associated with access using groups, roles and entitlements.  The challenge of centralized versus distributed access management is covered as well as a demo of the Grouper Groups Management Toolkit.

Attribute Release: uApprove and
Related Approaches and Issues

Identity Providers play an important role in  managing and asserting identity information in a digital information age when it is critical to operate efficiently and securely in an online environment. With increased privacy and security risks, including compliance with FERPA, solutions such as uApprove offer the opportunity to place the decision regarding sharing of personal information in the hands of the individual. This session will discuss technology and policy options (including uApprove and adopting default attribute bundles).

3:45-4:00

Break

Break 

4:00-5:15

Building Blocks for
Access Management: Provisioning

Ever dream of having all your campus services provisioned automatically?  Hear some of the benefits and ramifications of implementing various solutions as case studies from "Self-Service Menus" to Group and Role-based service provisioning are presented.

Is It Time to Launch Your Federation?

So why build a federation anyway? And are you ready to do it? A federation is a collaborative group of organizations, such as a health care network or a state education consortium, which agree to interoperate using a common set of rules about identity, privacy, and security. If you think your own consortium might benefit from federated identity and you want to learn what it takes, be sure to attend this session. Using case studies of successful federation examples, we’ll examine readiness indicators, requirements, specific benefits of federated identity, as well as best practices on how to launch your own federation.

AegisUSA Hospitality Reception , Fischer International Hospitality Reception

7:30-4:30 

Registration Open 

7:30-8:30

Breakfast

8:30-9:45

Campus Identity Governance
You can't do IdM in a vacuum: governance provides direction, control, and accountability. External influences have an effect on governance; and now we have federation, which is yet another external influence. In this session we'll take a hard look at both identity governance and federation governance, examining best practices and lessons learned.

9:45 - 
10:15

Final Lightning Round
Now that you've had a chance to hear from speakers and other CAMP attendees, this is your chance to outline any IdM projects, or federated IdM projects, that you want to pursue -- and to recruit collaborators with similar interests.

10:15-10:30

Break

10:30-Noon

Cloud Computing and IdM 
Cloud computing has changed the landscape for the delivery of new services; for example Microsoft Office 365, WorkDay, Google applications, grid computing, Project Moonshot, and others. In addition, some campuses and resource providers having begun exploring a shared services model for some applications. Faculty, students, and staff now can make use of Service Providers that live in public and private clouds, or are shared with another institution. What lies ahead at the intersection of identity and cloud-based services?  

This OARnet-led interactive session will feature speakers from leading-edge Service Providers with an Ohio focus; identification of Federated Identity pilot opportunities around the State; and the latest updates from the University System of Ohio’s BOR-CIO Technology & Security subcommittee and OARnet about the Ohio federated identity program.

Registration for the OANnet meeting is separate from CAMP registration. If you are interested in attending this session, please contact Mark Beadles of OARnet at markbeadles@oar.net or visit http://www.oar.net/iamohiohttp://www.oar.net/iamohio/camp/register.shtml for more information.