News and information about InCommon Academy offerings

[Dean Woodbeck <>]

Title: InCommon Update - October 2014

Email not displaying correctly? View it in your browser.

InCommon is operated by Internet2

October 2014

October 15 IAM Online Features Bronze Assurance

It's October. It's Cybersecurity month, and this IAM Online features two case studies from campuses that have adopted the InCommon Bronze Assurance Profiles - UMBC and the University of Nebraska Medical Center. Join us at 2 pm ET on October 15 to find out why and how they plan to use Bronze as part of their local security strategies. www.incommon.org/iamonline.

ACAMP and CAMP Part of Technology Exchange

Game on! ACAMP, CAMP, Trust/Identity, 2014 Technology Exchange, October 26-30, 2014, in Indianapolis, Indiana. The ACAMP unconference (October 27-28) will explore community issues and potential solutions. CAMP (October 29-30) includes two tracks to provide the basics of identity management and federated IdM (the 101 track), as well as U.S. and international case studies (the 201 track). See the Trust, Identity, and Middleware track on the TechEx program website.

Certificate Service Moving to More-Secure SHA-2

The certificate and browser community is in the process of moving from certificates using SHA-1 to new, more secure, certificates using SHA-2. SHA-2 certificates, the new industry standard, are available to all InCommon Certificate Service subscribers, and can be requested in 1, 2 or 3 year duration. See more information about migrating to SHA-2 and a number of other certificate service news items on our wiki, including:

• Legacy SHA-1 Certificates
• Certs for internal domains or RFC-1918 addresses
• IGTF Grid-Compatible Server Certs
• AMT Certs
• ECC (Elliptic Curve Cryptography)

More Campuses Adopt Research & Scholarship Category

The Research & Scholarship (R&S) category is now supported by 99 identity providers and 27 service providers. Recent additions include IdPs at Syracuse, UCLA, and Yale plus service providers from the California Digital Library and the Lifestyles of the Attribute Rich and Privacy Preserved (LARPP) project. By adopting R&S, an IdP greatly
simplifies the online experience of researchers by providing a minimal set of attributes to an entire category of services. Virtual organizations and collaborative services no longer need to negotiate with every identity provider.

UMBC Achieves Bronze Assurance

The University of Maryland Baltimore County (UMBC) has become the third higher-education organization to become certified for the Bronze Identity Assurance Profile under the InCommon Assurance Program. InCommon developed the assurance program as part of its mission to provide secure and privacy-preserving trust services for its participants. Enabling higher-value, higher-risk services requires increased trust by the organizations that run the identity and cloud services.

IDM Integration Joins Affiliate Program

IDM Integration, a company that helps customers build identity management solutions, has joined the InCommon Affiliate Program. The Affiliate Program provides the research and education community with a way to safely and efficiently connect with partners that can help build the necessary underlying infrastructure that supports federated identity and access management.

Colorado State University-Pueblo Latest Quilt/InCommon Pilot

Colorado State University-Pueblo has become the tenth pilot to join the Quilt InCommon project to explore ways to make it easier for smaller institutions and K-12 school districts to deploy federated identity management. Limited resources, skill sets, or federation experience often prevent smaller institutions from joining an Identity Federation. R&E Network providers or "Regionals" (members of The Quilt) and InCommon are working to bridge this gap. More information is on this wiki page: https://spaces.internet2.edu/x/zAQwAg

Upcoming Events

October 15, 2014 - IAM Online - InCommon Bronze: Security

October 26-30, 2014 - CAMP and ACAMP at the Technology Exchange - Indianapolis

November 10-11, 2014 - InCommon Shibboleth Installation Workshops - University of Utah, Salt Lake City, UT

November 12, 2014 - IAM Online - Turning Off NTLMv1 or How to Approach Turning Off Legacy Technology - Brian Arkills (University of Washington)

Email Lists: Information and Conversation

InCommon has a number of email lists for you to join and keep abreast of work in federated identity and access management. You can participate in working groups (or just follow their progress), and/or join the participants list for general information and trouble-shooting. Details are at incommon.org/lists.html

Steering, TAC Minutes Available

InCommon Steering Minutes - Keep up on InCommon's policy-making entity. Minutes are available on the InCommon Collaborate wiki.

InCommon Technical Advisory Committee biweekly meeting minutes are available at https://spaces.internet2.edu/x/_QHkAg

Featured Affiliates

Cirrus Identity offers cloud-hosted, user-friendly identity solutions that enable campuses to expand access and enhance collaboration. Their initial product, the Cirrus Gateway, enables campuses to quickly and easily grant access to parents, alumni, incoming students, research collaborators and more using social identities such as Google, Facebook, Twitter, and LinkedIn. http://cirrusidentity.com.

Unicon provides services and support for open source solutions. The company’s experienced, highly skilled experts supply architectural knowledge, deep technical skills, and best practice expertise to ensure successful deployments of Shibboleth.

The InCommon Affiliate Program connects higher education institutions with commercial or non-profit organizations that provide software, content, guidance, support, and implementation and integration services related to participating in the federation.

New Certificate Service Subscribers

The InCommon Certificate Service now has 307 subscribers. We welcome these new members to the community.

 

• Johnson & Wales University
• The Broad Institute of MIT and Harvard
• University of Northern Colorado
• University of Wisconsin - Stout

Duo Security Multifactor Authentication Site License

InCommon and Duo Security offer two affordable pricing models for mobile-based second-factor authentication, including campus site licenses that can cover faculty/staff, student, medical centers, or all of the above. To date, 28 campuses subscribe to the site license and many more are piloting the program using the a la carte option. This month's new site license subscriber:

• Weill Cornell Medical College

New InCommon Participants

InCommon currently has 681 participants. We welcome these new participants to the InCommon community.

 

Higher Education

• Johnson & Wales University
• Lawrence Technological University
• Southern Utah University

Research Organizations

• The MITRE Corporation

Sponsored Partners

• Comodo CA, Ltd
• Do Sports Easy
• Logistical Athletic Solutions, LLC
• Modo Labs
• Reheer
• SAE International
• The Beans Group

As a service to the community, each month, we invite our new Research Organizations and Sponsored Partners to provide information about their services. These partners responded in time for this month's newsletter.

Research Organization

The MITRE Corporation is a private, independent, not-for-profit organization founded in 1958 that is chartered to work in the public interest. We currently manage seven Federal Funded Research and Development Centers (FFRDC). Information Services is a team of information professionals located in both McLean, VA and Bedford, MA (USA) who work on providing information analysis for MITRE’s work programs; providing access to paid external information resources; answers to questions; and our InfoCenters provide a place for people to collaborate, brainstorm, gather for casual meetings, and use our newest technologies which include 3D printers.

Sponsored Partners

The Beans Group is a technology and media company on a mission to "Empower Young People to Thrive". We run Voxburner, a research agency which helps organisations understand young people through quantitative and qualitative methods as well as our leading conferences. We also run Student Beans, which reaches over 3 million students every month. Our federated service is Student Beans iD - a digital student card which is designed to save students money off everything including books, laptops, stationary and clothes to make the university experience more affordable, rewarding and reduce the number of students that drop out of education due to financial issues.

Cloudpath Networks provides onboarding solutions that simplify security in diverse BYOD environments.  Available on-premise or in the cloud, the XpressConnect ES is designed to distribute client certificates and configure certificate-enabled services, such as WiFi, in a self-service, automated manner across a wide array of student, faculty, and guest-owned devices.  XpressConnect ES v4 adds support for distributing and managing client certificates from InCommon along with the built-in PKI and Microsoft CA. If password changes are killing your WiFi user experience and driving up support costs, it’s time to investigate EAP-TLS with XpressConnect ES and InCommon. To learn more, please visit www.cloudpath.net

LCMS+ is a specialized learning management system designed for schools of healthcare education. LCMS+ helps effectively track teaching, learning and assessment, and also makes accreditation reporting easier and more accurate.  The calendar-based structure of LCMS+ offers an individually customized schedule for students. Its multi-campus, multi-program capabilities allows schools to integrate shared elements while keeping program-specific data like financials, objectives and reporting separate. Other features include sophisticated curriculum mapping, an integrated exam system, patient encounter tracking, clinical skills assessment, 360-evaluations, portfolios, faculty contribution tracking, automated notifications to faculty and students, support for modalities like team-based learning, robust reporting functionality and more. Learn more at lcmsplus.com.

Modo Labs’ Kurogo Mobile platform enables universities to quickly create powerful multi-site and multi-role apps that work seamlessly with any data source on any device. Non-technical citizen developers, such as non-IT staff and even students, can create mobile apps in hours. Kurogo Mobile Campus aggregates and processes data from any number of disparate information systems, including SIS and LMS systems, and delivers a mobile-optimized version of this data to any device via a mobile website or native app. Kurogo Publisher allows non-technical staff to create and customize content-rich apps and micro-sites in almost any way imaginable.

SAE International is the nexus that connects the engineering community for the purpose of life-long learning and the advancement of the mobility industry. It offers programs, products, and services that afford the engineering community limitless opportunities to LEARN, DEVELOP, and CONNECT so together, we can advance industry. SAE’s Digital Library Platform provides access to over 130,000 full-text technical papers, standards, eBooks, and magazines from SAE and other renowned organizations. Learn more at www.sae.org and www.saedigitallibrary.org.

Follow on Twitter   Friend on Facebook

The InCommon Update is published for InCommon participants and other interested parties. InCommon is operated by Internet2. Copyright © 2014 Internet2, All rights reserved. Email