Future of Campus Single Sign-On Security by Warren Leung
Explore the evolution of campus single sign-on security, from the history of WebAuth to the implementation of SAML-based systems. Learn about the benefits of standards-based security, the tentative timeline for migration, and how SAML works with Shibboleth SP. Get ready for the new UI and enhance your understanding of secure authentication methods.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
The Future of Campus Single Sign-On Security Warren Leung
Brief History WebAuth 90 s home grown Single Sign On (SSO) system Widely deployed on campus 400+ applications Security Works only for applications hosted at UCI Security Assertion Markup Language (SAML) Shibboleth SAML 1.0 released in 2000 s OASIS Standard Federation enabled Gaining adoption 100+ applications at UCI This is the next step forward
Why? Standards based Reduced application development overhead - no additional LDAP call for data Real-time data delivery at sign in Widely adopted world wide Federation Support Language agnostic Secure Security
Tentative Timeline End of October New Look and Feel for WebAuth and Shibboleth UI 2020 2021 Provide training and how to documentation to assist users migrating New SSO integrations should be SAML based and not WebAuth Begin migrating WebAuth based applications to SAML 2021 2022 Migrate all remaining WebAuth Applications Early 2022 Shut down WebAuth Security
New UI Security
How does it work? Security https://www.secureauth.com/blog/introduction-to-saml
Working with the Shibboleth SP Install Shibboleth Service Provider (SP) Works on Apache, IIS, NGINX, Mac Update configuration files Read environmental variables at sign in Security
Questions? Security
Thank You Security warrenwl@uci.edu
