MFA Interop Working Group

[David Walker <>]

In case you've missed it, our draft MFA profile documents have been opened for public comment as part of today's TIER release.  Since there's lot in this first release for TIER, we'll send a reminder of our comment period to the InCommon Participants, InCommon Assurance, and REFEDS lists a couple of days.

Also, don't forget that we decided to cancel this week's call.  We'll reconvene at our usual time next week to review the comments we've gotten by that time.

David

-------- Forwarded Message --------

Subject:	[tier-architecture] TIER: Component Release One
Date:	Mon, 18 Apr 2016 18:53:07 +0000
From:	Steven Zoppi
Reply-To:
To:	, , , , , , , , , , , ,

It’s our pleasure to announce Component Release One of the TIER Program Deliverables.  This release provides some new functionality, but its main purpose is to demonstrate the direction for the TIER Program and receive community feedback.  This release has been made possible through the vast contributions made by all of the working groups, workshop participants, and technical members of the community – our thanks go to you: one and all!

 

The TIER release includes:

●      Shibboleth Single Sign-On and Federating Software (Identity Provider Version 3.2.1)

●      Grouper enterprise access management system (Version 2.3)

●      COmanage Registry (Version 1.0.3)

●      First Look Containers and Virtual Machine Images

COmanage Registry 1.0.2 (VM/Container), Grouper 2.2 (Container), Shibboleth 3.2.1 (Coming)

●      APIs to enable extension and flexibility

●      MACE-Dir eduPerson (Version 201602, released March 9, 2016)

●      InCommon Multifactor Authentication Profile (Draft)

●      InCommon SAML V2.0 Implementation Profile for Federation Interoperability 20160303

●      InCommon Global Interfederation Integration (In production February 15, 2016)

 

This document Internet2 Report TIER Release One.V20160416.Rev1.pdf contains a full description of the scope, depth and breadth of this initial release. 

The release packages the three open-source software components (Shibboleth, Grouper, and Comanage Registry ) and provides a first look at a container-based distribution. This containerized approach, and the use of APIs, will become more important as time goes on and these software tools become more integrated. InCommon services and working groups, which also support the goals of TIER, contributed InCommon’s Global Interfederation service and two practice sets. Also included is MACE-Directories eduPerson schema that supports ORCID. (ORCID is a community-driven registry of unique researcher identifiers and a transparent method of linking research activities and outputs to these identifiers.)

 

We are very interested in your feedback and have developed a web page to serve as a central location for support contact information. Although the software components in the TIER release have been tested and released by their respective engineering teams, the containers must be tested and refined with the help of campus practitioners. 

 

We have scheduled a webinar to provide an overview of the TIER work to date. Here are the details:

    Date: Monday, April 25, 2016

    Time: 2 pm ET / 1 pm CT / Noon MT / 11 am PT

    Adobe Connect URL: http://internet2.adobeconnect.com/tierfirstrelease

    Details:  https://www.internet2.edu/news/detail/10653

 

Thanks to All Who Contributed to This Release!

Hundreds of community members worked hard to establish a solid foundation for TIER. Through a series of workshops, campuses contributed more than 200 use cases demonstrating the need for a comprehensive and integrated approach to identity and access management, and helping to determine both the requirements and TIER’s foundation elements. 

 

TIER also relies heavily on working groups to get the community portion of the work done, involving more than 100 active, contributing individuals from the community. These teams, together with Internet2 contracted partners and staff, work to ensure complete and comprehensive software and practices development, documentation, partner engagement, and campus engagement. Internet2 also thanks the 49 TIER investor institutions and all Internet2 members for their support.

 

TIER Backstory

TIER is both an open-source toolset and a campus practice set. The toolset includes open-source software components and APIs packaged in a container, with a regular release schedule. The ultimate goal of TIER is the integration of community-developed open source trust and identity software components into a manageable and complete identity and access management suite, supported by common campus practices.

Starting in 1999, the Internet2 community collaborated to develop three open source software packages (Shibboleth, Grouper and COmanage) and deployed the InCommon Federation. TIER grew out of campus discussions and the desire to align efforts to sustain these components, integrate them and extend their functionality to support key use cases. More than 100 community members participate in TIER working groups. The effort is initially funded by 49 investor campuses and an allocation of Internet2 membership fees, and is guided by the TIER Community Investor Council.  More information and the process and history of TIER is on the About TIER web page.

 

Regards,

The Internet2 TIER Program Team

 

 

Attachment: signature.asc
Description: OpenPGP digital signature