SAFARI UKDA Shibboleth Authentication for Access to the Resource Infrastructures of the UKDA

1
SAFARI UKDAShibboleth Authentication for Access
to the Resource Infrastructures of the UKDA
2
Current system

• One-stop registration using Athens provides
  access to
• UKDA
• Census (CDU, CIDS, SARS, UK Borders, CHCC)
• ESDS International
• User details held in a registration database at
  UKDA. World-wide registration.
• Differential access control based on
• Athens resource (e.g. Census UK HE/FE only)
• Agreement to special conditions
• Combination of user type and usage type (for UKDA
  survey data)

3
SAFARI UKDA

• Aims to Shibbolize the one-stop registration
  system and one or moretarget resources
• Access needs to be maintained as currently
• System must be compatible with all the services
  (Essex, MIMAS and EDINA)

4
Technical solution based on University of
Alabama at Birmingham VOSP
5
Choice of VOSP model

• Normal Shibboleth flow is not broken
• Use of scoped eduPersonPrincipalName attribute
  which is persistent across SPs
• No requirement for SPs or IdPs to install any
  additional plugins/make any additional
  modifications

6
Issues to resolve

• How to deal with recording of special conditions
• Athens to Shibboleth Gateway
• Federations for users outside UK HE/FE

7
(No Transcript)
8
(No Transcript)
9
(No Transcript)
10
(No Transcript)
11
(No Transcript)
12
(No Transcript)
13
(No Transcript)
14
(No Transcript)
15
(No Transcript)
16
(No Transcript)
17
(No Transcript)
18
(No Transcript)
19
Further information

• UKDA SAFARI web site
• safari.data-archive.ac.uk/

20
Detailed technical solution