Date: April 21
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Real World Secure Research Environments Implementations and Lessons Learned

Join us as IT leaders from multiple institutions pull back the curtain on their operational cloud enclaves. Get a high-level architectural review of implementations across various cloud providers, highlighting the unique design choices made by each school. 

Our panel of experts will share lessons learned from their deployment journeys, from cost-governance to identity management.

Key Takeaways:

• Review the architecture of multiple real-world implementations
• Lessons learned from peers who are farther along in their journey
• Discover strategies for maintaining rigorous security standards without stifling research innovation

Speaker:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder

Register Today

Date: April 22
Time: 1-2 p.m. ET

We are excited to introduce the CertiNext team to the InCommon community. InCommon is collaborating with CertiNext to provide an updated InCommon Certificate Service. CertiNext’s platform provides a foundation that is more closely aligned with the community’s needs and better positions InCommon to respond to known and unforeseen changes in the certificate industry.

Come meet the new team, hear what prompted the transition, and learn about next steps. Our goal is to provide clarity, context, and confidence in this transition as we move forward together.

Speakers:

• Sara Jeanes, Director, eduroam and Certificate Services at Internet2
• Scott Rae, Senior VP and Global Strategic Advisor at CertiNext
• Paul Caskey, Senior IAM Architect at Internet2
• Romy Bolton, Associate VP of Trust & Identity at Internet2

REGISTER TODAY

Date: May 5
Time: 12-4 p.m. ET
Cost: Free for CICP subscribers (with a $100 no-show fee); $150 for Internet2 members; $200 for non-members

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Security Controls – From Interpretation to Review

In this workshop, we will close the “translation gap” between technical implementation and auditor expectations. Through a unique Red Team/Blue Team simulation, you will move beyond checklists to experience the full lifecycle of a security control. 

You’ll learn to identify hidden gaps between your actual configurations and your written policies, practicing how to defend your implementation under the scrutiny of an audit. 

Key Takeaways:

• Understand the complete lifecycle of security control implementation and review
• Experience the relationship between implementation decisions and documentation requirements
• Identify common gaps between what organizations document and what they implement
• Practice collaborative security control evaluation
• Gain familiarity with NIST 800-171 control implementation challenges in research environments

Speakers:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder
• Silas Korb, Cloud Engineer at the University of Colorado Boulder

Register Today

Date: May 5, 2026
Time: 2:00 – 3:00 p.m. ET

This collaborative session invites participants to share experiences and explore solutions for integrated identity management as students, faculty, and researchers move between academic and clinical environments within academic medical centers. 

Join peer community members such as university CIOs, medical identity practitioners, and IT administrators for open dialogue on navigating the complexities of cross-domain authentication. We’ll discuss real-world implementation experiences in synchronizing campus and health system credentials, strategies for balancing HIPAA and FERPA compliance with user experience, and practical next steps for harmonizing access across disparate networks. 

Come prepared to ask questions, share insights, and connect with peers facing similar challenges in academic medical environments. 

Facilitators:

• Robert Howard, Vice President for Information Technology & CIO at the University of Alabama at Birmingham
• Therese Perlowski, Internet2

Register Today

Date: May 12, 2026
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – AWS Approach to Secure Research Environments

This workshop — the first of our cloud provider workshops — focuses on the AWS architecture patterns required to build a scalable, secure “sandbox” for sensitive workloads.

Join us to master the AWS design patterns needed to move beyond “one-off” fixes and build a defensible, grant-ready research environment.

Key Takeaways:

• Utilize AWS Artifact to discover relevant compliance artifacts
• Design a modular environment that doesn’t hinder research productivity
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• AWS Solution Architects TBA

Register Today

Internet2 is excited to announce the launch of the NET+ UpGuard program. UpGuard is a leading provider of third-party risk management technology. 

The new NET+ UpGuard service brings simplified deployment, competitive pricing, and research-ready flexibility to research and higher education institutions.

Come hear Steven Lovaas, CISO at Colorado State University, and Ramon Delacruz, Senior Manager of Information Security & Data Privacy at Harvard University, share their experience with the NET+ service evaluation and third-party risk management.

Speakers:

• Steven Lovaas, CISO at Colorado State University
• Ramon Delacruz, Senior Manager of Information Security & Data Privacy at Harvard University 
• Greg Pollock, Director of Research and Insights at UpGuard
• Nick Lewis, NET+ Senior Program Manager, Internet2

Register Today

The 2026 Cloud Forum is slated for May 19-21 in Madison, Wisc.

Date: May 20, 2026

Tune in to InCommon’s monthly webinars for industry insights, thought leadership, and practical know-how. Our sessions feature leaders, practitioners, and community subject matter experts sharing implementation experiences, emerging trends, and innovative approaches shaping the future of research and education.

Learn More

Date: May 26
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Microsoft Approach to Secure Research Environments

Join us as we focus on the Microsoft Azure design patterns used to build a “Trusted Research Environment” that keeps sensitive data under institutional control. 

Discover how to transform Azure into a compliant, grant-ready platform for your institution’s most sensitive research.

Key Takeaways:

• Utilize Azure’s compliance artifacts and the Service Trust Portal
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Sven Aelterman, Microsoft Azure Solution Architect
• Ken Hoover, Microsoft Azure Solution Architect

Register Today

Join us for BaseCAMP, an immersive five-day virtual event dedicated to Identity and Access Management (IAM) in the higher ed and research community. Join us for expert-led sessions and valuable peer connections and conversations. New this year, we’ll also feature a mini unconference where participants get to set the agenda! 

Crafted by peers who understand the challenges and opportunities in IAM, BaseCAMP isn’t your typical training – it’s a pathway forward on your IAM journey and a hub for connection, collaboration, and exchange.

Learn More Register Today

Date: June 2
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Google Cloud Approach to Secure Research Environments

This workshop focuses on the Google Cloud (GCP) architecture patterns designed to create high-performance “Data Clean Rooms.” These are isolated environments that satisfy NIST and HIPAA requirements while providing researchers with modern, cloud-native tools.

Learn how to leverage Google Cloud to build a secure, scalable, and audit-ready home for your most sensitive research data.

Key Takeaways:

• Navigate the Google Cloud Compliance Reports Manager
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Google Cloud Industry Architects TBA

Register Today

Date: June 16
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Kion’s Approach to Secure Research Environments

The final workshop in our series features Kion, a leading multi-cloud management platform, to demonstrate how to maintain a consistent, secure architecture for sensitive workloads across AWS, Azure, and Google Cloud.

Key Takeaways:

• Identify and access compliance artifacts that document shared responsibility
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Kion Solution Architects TBA

Register Today

Date: June 23
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Mapping the Implementation Phase for Secure Research Environments

As we conclude the initial learning phase of our series on Secure Research Environments, we prepare to pivot toward a series of action-oriented webinars and workshops. This community-focused webinar serves as the critical transition point from exploring “what is possible” to defining “what is next.”

Speaker:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder

Register Today

Date: July 21
Time: 12 – 4 p.m. ET
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

In this workshop, you will learn how to set up and manage a containerized application catalog to track internal tools with a user interface to view and edit the catalog.

Together, we will review containerization fundamentals, multi-container orchestration with Docker Compose, and what it takes to containerize and deploy an enterprise application. This workshop is right for you if you’re looking to containerize existing applications in your enterprise.

Instructors: Ananya Ravipati and Tim Manik, Internet2

Learn More

This course provides hands-on experience applying concepts from Grouper Basics, Advanced Group Management & Access Control, Managing Grouper Privileges, and Grouper Administration & System Operations in real-world situations. 

You will learn to integrate Grouper with applications, set up application structures, and implement access policies. The course also covers how to edit policies and manage access as ticket-based adjustments arise, ensuring participants can effectively provision data and adapt to changing requirements.

Learn More Register

Date: Aug. 18
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 3: Technical Implementation – VDI as a Security Boundary

Virtual Desktop Infrastructure (VDI) offers a powerful approach to establishing security boundaries in regulated research environments. This webinar session explores practical experience implementing VDI across cloud and on-premises platforms supporting regulated research. 

Attendees will learn where VDI fits within the broader secure research environment architecture and explore implementation strategies, including encryption, VPN integration, and key security trade-offs. Our speakers will provide conceptual and technical insights for institutions evaluating VDI as a component of their compliance strategy.

Key Takeaways:

• Describe the role of VDI as a security boundary within a secure research environment architecture, and how it supports compliance with frameworks such as NIST SP 800-171 and CMMC
• Identify key security considerations — including encryption, VPN, and access controls — when deploying VDI for regulated research workloads
• Evaluate trade-offs in cost, complexity, and security posture when selecting a VDI platform for regulated research

Speakers:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder
• Sean Kelly, Senior Software Engineer at Purdue University

Register Today

Date: August 19, 2026

Tune in to InCommon’s monthly webinars for industry insights, thought leadership, and practical know-how. Our sessions feature leaders, practitioners, and community subject matter experts sharing implementation experiences, emerging trends, and innovative approaches shaping the future of research and education.

Learn More

Date: Sept. 1
Time: 1-2:30 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 3: Technical Implementation – Compliance-Aware Data Management Using Globus

Learn about the sharing and access control capabilities of Globus that help institutions meet compliance requirements for research data sharing and collaboration. See how features such as time-limited permissions, sharing policies, and carefully scoped guest collections can be used to enforce least privilege and controlled access to data. We will also cover data classification and how to design sharing workflows that respect regulatory and contractual constraints.

Key Takeaways:

• Support compliance-oriented data sharing with Globus sharing capabilities
• Map Globus configurations to NIH Data Management and Sharing Policy and other federal data sharing requirements
• Design data sharing workflows that respect sensitivity, institutional review board constraints, and data use agreements

Speaker:

• Vas Vasiliadis, Chief Customer Officer at Globus

Register Today

Dive into the world of Shibboleth Service and Identity Providers. Get hands-on training and gain expertise in deploying, configuring, and managing Shibboleth software. Explore containers, DevOps strategies, and modernize your operations while receiving personalized guidance from experienced trainers. You’ll also learn how to integrate seamlessly with InCommon Federation using recommended defaults. Plus, see a demo of the Metadata Configuration Manager [formerly Shib IdP UI).

Instructors:

• Paul Riddle, Senior Middleware Architect, University of Maryland – Baltimore County
• Paul Caskey, IAM Architect, Internet2

Learn More Register Today

Have you hit roadblocks while troubleshooting RADIUS? Are you aware of those authentications that fail, but the logs aren’t giving up any insights? Do you see patterns of failures but can’t find a consistent cause?

This eduroam workshop is aimed at IT infrastructure staff with some RADIUS configuration experience who want to gain more hands-on experience. We will explore infrastructure topics relevant to eduroam, including in-depth RADIUS troubleshooting and packet analysis, identifying and correcting eduroam-specific RADIUS proxy issues, eduroam best practices, and more.

Learn More Register

The 2026 Internet2 Technology Exchange is slated for October 26-30 in Minneapolis, Minn.

View the schedule, submit your proposal and check out hotel and travel information. We hope to see you there!

This course tackles complex identity scenarios that are unique to higher education institutions and how midPoint can address them.

Pick up techniques for managing concurrent roles, implementing grace periods, and orchestrating smooth identity transitions while maintaining appropriate access levels and security controls.

This training covers multi-source identities, advanced role management, life cycles, and so much more.

Instructors:

• Ivan Noris, Expert Identity Engineer, Evolveum
• Peter Balčirák, Identity Engineer, Evolveum

Learn More Register

This course provides hands-on experience applying concepts from Grouper Basics, Advanced Group Management & Access Control, Managing Grouper Privileges, and Grouper Administration & System Operations in real-world situations. 

You will learn to integrate Grouper with applications, set up application structures, and implement access policies. The course also covers how to edit policies and manage access as ticket-based adjustments arise, ensuring participants can effectively provision data and adapt to changing requirements.

Learn More Register

Look for more information soon on CommEX27 in Philadelphia, Penn.

Look for more information soon on TechEX27 in Boston, Mass.

Did you miss an event in 2026? Looking for event recordings? We’ve got you covered.

Check out our Internet2 2026 Past Events page.

Want to go further back in time? We’ve got you covered.

• • View 2025 Events

  • View 2024 Events

• • View 2023 Events

• • View 2022 Events

• • View 2021 Events

• • View 2020 Events

• • View 2019 Events

Did you miss aTechEXtra event? Listen to recordings!