Assurance

["Roy, Nicholas S" <>]

All,

 

Here’s one more piece of material for tomorrow’s AD/Silver cookbook call.  It’s a draft note to the InCommon Participants list to open up a public review period for the cookbook.  We’ll discuss this on the call, but if you have any feedback you’d like to send via email, please feel free to do so.

 

Thanks,

 

Nick

 

<DRAFT>

Subject: Public Review Draft: InCommon Silver with Active Directory Cookbook

 

Greetings, InCommon Participants,

 

As you’re probably aware, InCommon is preparing to begin accepting applications for its assurance program in the near future.  A number of InCommon participant institutions have been preparing to submit applications to the assurance program to allow them to assert InCommon Silver level of assurance.  Some of us have collaborated on building documentation that will help us to configure and assess our systems for compliance with the standards in the Identity Assurance Profiles for Bronze and Silver (http://www.incommon.org/docs/assurance/IAP_V1.1.pdf).  Some of us have been working for almost a year on a draft “cookbook” that will help those who have Microsoft’s Active Directory Domain Services (commonly referred to as “Active Directory” or “AD”) deployed, be able to configure it for compliance with the technical requirements of InCommon Silver.

 

We need your help to get the “draft” tag removed from this document.  Please take some time to review it on the InCommon Wiki:  https://spaces.internet2.edu/x/w56KAQ

 

If you have knowledge of, interest in, or have Active Directory Domain Services deployed at your institution, please take some time to review the problem statements, risk mitigation strategies, compensating controls and sample management assertions in the document, as well as the overall flow of the document.  We’d like to get feedback from as large an audience as possible, so please also feel free to share this with any auditors, IT security or policy officers, Active Directory specialists or anyone else you think may have a stake in the security and configuration of your authentication infrastructure.  Please also keep an eye out for any typographical or other simple errors.  Send comments to the Assurance list or to me.  We’d appreciate getting feedback on the document before January 31st.

 

Thank you,

 

Nick

------------

Nicholas Roy – Identity Architect

The University of Iowa / ITS - Administrative Information Systems / Directory and Authentication

</DRAFT>