Time: 1:30 – 2:30 p.m. ET

The concepts of Zero Trust security are widely understood to be best practices within the research and education and wider information security communities. Join us for an interactive discussion on how Zero Trust concepts can be supported by processes and tools within (and supplemental to) the InCommon Trusted Access Platform identity and access management tools.

Some areas that will be explored include: What do our institutions consider in-scope for our Zero Trust requirements and implementations? What are we actively pursuing in our current Zero Trust projects? What have we successfully deployed?

Facilitators:

• Kevin Hickey, Director of Information Security at the University of Detroit Mercy
• Rob Carter, IAM Architect at Duke University
• Nicole Roy, Senior Director of Infrastructure at Internet2

Register Today

Date: March 31
Time: 12-4 p.m. ET
Cost: $100 for CICP; $150 for Internet2 members; $200 for non-members

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 1: Strategy – Stakeholder Identification & Governance Alignment Workshop

Join us for a workshop that helps you build a core “tiger team” for the development and operations of your secure research environment. 

Designed for multiple participants from the same institution to attend together, we’ll work through practice exercises to stress test the identified groups and consider how these groups fit into the larger institutional context.

By the end of this workshop, each institutional team will have:

1. Tiger Team Roster: A list of 5-8 people who would be called to consult on challenging research scenarios that don’t clearly fit the standard SRE model
2. Full Stakeholder List: Complete identification of everyone who needs awareness/communication about the SRE effort
3. Tested Understanding: Confidence that both groups can handle realistic research scenarios
4. Integration Framework: Understanding of how SRE governance fits within existing institutional compliance structures
5. Next Steps Plan: Clear take-home exercises for governance mapping and RACI development

This workshop is limited to 40 participants, so sign up early to secure your seat.

Instructor:

• Jason Armbruster, CLASS Consultant for Internet2

Register Today

Date: April 7
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Patterns for Secure Research Enclaves

This webinar reviews the most common implementation patterns for secure research in higher education, centered on a robust sandboxing strategy. We will deconstruct five distinct Secure Research Environment archetypes and analyze how each one manages isolation, compute, and data egress. By seeking the commonalities across these models, we will provide a roadmap for building an integrated institutional strategy that protects data without stifling discovery.

Key Takeaways:

• Understand how precise scoping reduces the “audit surface” for externally regulated environments (e.g., NIST 800-171, CMMC)
• Review a technical taxonomy of five distinct research environments
• Evaluate trade-offs to align with your campus infrastructure, staffing, and researcher needs

Speaker:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder

Register Today

This course tackles complex identity scenarios that are unique to higher education institutions and how midPoint can address them.

Pick up techniques for managing concurrent roles, implementing grace periods, and orchestrating smooth identity transitions while maintaining appropriate access levels and security controls.

This training covers multi-source identities, advanced role management, life cycles, and so much more.

Instructors:

• Ivan Noris, Expert Identity Engineer, Evolveum
• Peter Balčirák, Identity Engineer, Evolveum

Learn More Register

Join us for the 2026 Internet2 Community Exchange (CommEX26), where IT leaders and their teams come together to shape the future of research and education technology. As Internet2 celebrates 30 years of community-driven progress, CommEX26 returns to Chicago on April 13-16, 2026 to mark this milestone with the global R&E community.

Explore the program, and register now to save with early bird rates.

Date: April 21
Time: 1-2 p.m.
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Real World Secure Research Environments Implementations and Lessons Learned

Join us as IT leaders from multiple institutions pull back the curtain on their operational cloud enclaves. Get a high-level architectural review of implementations across various cloud providers, highlighting the unique design choices made by each school. 

Our panel of experts will share lessons learned from their deployment journeys, from cost-governance to identity management.

Key Takeaways:

• Review the architecture of multiple real-world implementations
• Lessons learned from peers who are farther along in their journey
• Discover strategies for maintaining rigorous security standards without stifling research innovation

Speaker:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder

Register Today

Date: April 28
Time: 12 – 4 p.m. ET
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

In this workshop, you will learn how to set up and manage a containerized application catalog to track internal tools with a user interface to view and edit the catalog.

Together, we will review containerization fundamentals, multi-container orchestration with Docker Compose, and what it takes to containerize and deploy an enterprise application. This workshop is right for you if you’re looking to containerize existing applications in your enterprise.

Instructors: Ananya Ravipati and Tim Manik, Internet2

Learn More

Date: May 5
Time: 12-4 p.m. ET
Cost: Free for CICP subscribers (with a $100 no-show fee); $150 for Internet2 members; $200 for non-members

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Security Controls – From Interpretation to Review

In this workshop, we will close the “translation gap” between technical implementation and auditor expectations. Through a unique Red Team/Blue Team simulation, you will move beyond checklists to experience the full lifecycle of a security control. 

You’ll learn to identify hidden gaps between your actual configurations and your written policies, practicing how to defend your implementation under the scrutiny of an audit. 

Key Takeaways:

• Understand the complete lifecycle of security control implementation and review
• Experience the relationship between implementation decisions and documentation requirements
• Identify common gaps between what organizations document and what they implement
• Practice collaborative security control evaluation
• Gain familiarity with NIST 800-171 control implementation challenges in research environments

Speakers:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder
• Silas Korb, Cloud Engineer at the University of Colorado Boulder

Register Today

Date: May 12, 2026
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – AWS Approach to Secure Research Environments

This workshop — the first of our cloud provider workshops — focuses on the AWS architecture patterns required to build a scalable, secure “sandbox” for sensitive workloads.

Join us to master the AWS design patterns needed to move beyond “one-off” fixes and build a defensible, grant-ready research environment.

Key Takeaways:

• Utilize AWS Artifact to discover relevant compliance artifacts
• Design a modular environment that doesn’t hinder research productivity
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• AWS Solution Architects TBA

Register Today

The 2026 Cloud Forum is slated for May 19-21 in Madison, Wisc.

Date: May 26
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Microsoft Approach to Secure Research Environments

Join us as we focus on the Microsoft Azure design patterns used to build a “Trusted Research Environment” that keeps sensitive data under institutional control. 

Discover how to transform Azure into a compliant, grant-ready platform for your institution’s most sensitive research.

Key Takeaways:

• Utilize Azure’s compliance artifacts and the Service Trust Portal
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Sven Aelterman, Microsoft Azure Solution Architect
• Ken Hoover, Microsoft Azure Solution Architect

Register Today

Join us for BaseCAMP, an immersive five-day virtual event dedicated to Identity and Access Management (IAM) in the higher ed and research community. Join us for expert-led sessions and valuable peer connections and conversations. New this year, we’ll also feature a mini unconference where participants get to set the agenda! 

Crafted by peers who understand the challenges and opportunities in IAM, BaseCAMP isn’t your typical training – it’s a pathway forward on your IAM journey and a hub for connection, collaboration, and exchange.

Learn More Register Today

Date: June 2
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Google Cloud Approach to Secure Research Environments

This workshop focuses on the Google Cloud (GCP) architecture patterns designed to create high-performance “Data Clean Rooms.” These are isolated environments that satisfy NIST and HIPAA requirements while providing researchers with modern, cloud-native tools.

Learn how to leverage Google Cloud to build a secure, scalable, and audit-ready home for your most sensitive research data.

Key Takeaways:

• Navigate the Google Cloud Compliance Reports Manager
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Google Cloud Industry Architects TBA

Register Today

Date: June 16
Time: 1-3 p.m. ET
Cost: Free for CICP subscribers (with a $200 no-show fee); $300 for Internet2 members; $400 for non-members

Registration includes access to all vendor workshops on May 12, May 26, June 2, and June 16. You may attend one or all four. For CICP subscribers, no-show fees will not be applied if you attend at least one of these workshops.

Are you a CICP subscriber? Contact class@internet2.edu to receive your discount code for this workshop.

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Kion’s Approach to Secure Research Environments

The final workshop in our series features Kion, a leading multi-cloud management platform, to demonstrate how to maintain a consistent, secure architecture for sensitive workloads across AWS, Azure, and Google Cloud.

Key Takeaways:

• Identify and access compliance artifacts that document shared responsibility
• Design a scalable sandboxing architecture for a secure research environment
• Understand why this architecture is important, even if only one lab has these needs

Speakers:

• Kion Solution Architects TBA

Register Today

Date: June 23
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 2: Design – Mapping the Implementation Phase for Secure Research Environments

As we conclude the initial learning phase of our series on Secure Research Environments, we prepare to pivot toward a series of action-oriented webinars and workshops. This community-focused webinar serves as the critical transition point from exploring “what is possible” to defining “what is next.”

Speaker:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder

Register Today

This course provides hands-on experience applying concepts from Grouper Basics, Advanced Group Management & Access Control, Managing Grouper Privileges, and Grouper Administration & System Operations in real-world situations. 

You will learn to integrate Grouper with applications, set up application structures, and implement access policies. The course also covers how to edit policies and manage access as ticket-based adjustments arise, ensuring participants can effectively provision data and adapt to changing requirements.

Learn More Register

Dive into the world of Shibboleth Service and Identity Providers. Get hands-on training and gain expertise in deploying, configuring, and managing Shibboleth software. Explore containers, DevOps strategies, and modernize your operations while receiving personalized guidance from experienced trainers. You’ll also learn how to integrate seamlessly with InCommon Federation using recommended defaults. Plus, see a demo of the Metadata Configuration Manager [formerly Shib IdP UI).

Instructors:

• Paul Riddle, Senior Middleware Architect, University of Maryland – Baltimore County
• Paul Caskey, IAM Architect, Internet2

Learn More Register Today

Have you hit roadblocks while troubleshooting RADIUS? Are you aware of those authentications that fail, but the logs aren’t giving up any insights? Do you see patterns of failures but can’t find a consistent cause?

This eduroam workshop is aimed at IT infrastructure staff with some RADIUS configuration experience who want to gain more hands-on experience. We will explore infrastructure topics relevant to eduroam, including in-depth RADIUS troubleshooting and packet analysis, identifying and correcting eduroam-specific RADIUS proxy issues, eduroam best practices, and more.

Learn More Register

The 2026 Internet2 Technology Exchange is slated for October 26-30 in Minneapolis, Minn.

View the schedule, submit your proposal and check out hotel and travel information. We hope to see you there!

This course tackles complex identity scenarios that are unique to higher education institutions and how midPoint can address them.

Pick up techniques for managing concurrent roles, implementing grace periods, and orchestrating smooth identity transitions while maintaining appropriate access levels and security controls.

This training covers multi-source identities, advanced role management, life cycles, and so much more.

Instructors:

• Ivan Noris, Expert Identity Engineer, Evolveum
• Peter Balčirák, Identity Engineer, Evolveum

Learn More Register

This course provides hands-on experience applying concepts from Grouper Basics, Advanced Group Management & Access Control, Managing Grouper Privileges, and Grouper Administration & System Operations in real-world situations. 

You will learn to integrate Grouper with applications, set up application structures, and implement access policies. The course also covers how to edit policies and manage access as ticket-based adjustments arise, ensuring participants can effectively provision data and adapt to changing requirements.

Learn More Register

Look for more information soon on CommEX27 in Philadelphia, Penn.

Look for more information soon on TechEX27 in Boston, Mass.

Did you miss an event in 2026? Looking for event recordings? We’ve got you covered.

Check out our Internet2 2026 Past Events page.

Want to go further back in time? We’ve got you covered.

• • View 2025 Events

  • View 2024 Events

• • View 2023 Events

• • View 2022 Events

• • View 2021 Events

• • View 2020 Events

• • View 2019 Events

Did you miss aTechEXtra event? Listen to recordings!