Purdue University’s IAM Modernization Success Story

Participants learned about the real outcomes of Purdue’s IAM modernization journey. They learned what worked, what did not, and how their team accomplished its goals. We discussed the different stages in the process from gathering initial requirements and negotiating political nuances to developing strategy. and achieving tactical successes. Attendees learned what’s needed to begin on your institution’s IAM modernization journey.

 Speakers:

Mandi L. Witkovsky, Director of Identity & Access Management, Purdue University 

 Moderators: 

Charise M. Arrowood, Executive Director, Business Development, Unicon Inc.

Shibboleth Software Training 

Get first-hand experience with packaged service and identity providers. This hands-on virtual workshop demonstrates how to deploy the InCommon-ready Shibboleth Service and identity providers in a way that’s easy to install and manage. You will also learn how to modernize through the DevOps approach and dive into the world of containers and how they can make your life easier.

Visit the Shibboleth Training website for more information.

Early bird rates are in effect, so register by Sept. 1 and save on tuition!

Thanks for joining us for TechEX23! You may view presentations on the abstracts. We will post them as they are made available.

This high-level, hands-on virtual learning experience with GCP provided exposure to cloud services and terminology. This virtual course is designed for cloud computing beginners looking to facilitate or develop research workflows on the cloud.

This four-hour, virtual interactive course introduced the “what” and “how” of cloud computing for research using GCP. Participants had an immersive experience on the basic concepts of cloud computing and left with knowledge of how to compute, provision storage, and build research workflows in the cloud.

This high-level, hands-on virtual learning experience with Azure provided exposure to cloud services and terminology. This virtual course is designed for cloud computing beginners looking to facilitate or develop research workflows on the cloud.

This four-hour, virtual interactive course introduced the “what” and “how” of cloud computing for research using Azure. Participants had an immersive experience on the basic concepts of cloud computing and left with knowledge of how to compute, provision storage, and build research workflows in the cloud.

This high-level, hands-on virtual learning experience with AWS provided exposure to cloud services and terminology. This virtual course is designed for cloud computing beginners looking to facilitate or develop research workflows on the cloud.

This four-hour, virtual interactive course introduced the “what” and “how” of cloud computing for research using AWS. Participants had an immersive experience on the basic concepts of cloud computing and left with knowledge of how to compute, provision storage, and build research workflows in the cloud.

The annual 2023 Network Performing Arts Production Workshop (NPAPW23) explored use of advanced networking and interactive media in arts education and performance and brought together people and ideas to learn, teach, and get inspired!  The Rudi E. Scheidt School of Music at The University of Memphis added a unique perspective with their use of advanced networks and technologies in musical genres thriving in Memphis.

Participants joined the Internet2 staff for Routing Integrity Office Hours on Sept. 6. It was an  opportunity to ask questions about:

• ARIN Agreements (e.g., Fee Increases, Access to Security Services)
• Internet2 Route Reports
• Internet2’s Project to Reduce the Number of Rejected Routes
• Routing Security

Join Internet2 staff for Routing Integrity Office Hours at 2 p.m. ET Aug. 31. It’s a great opportunity to ask questions about:

• ARIN Agreements (e.g., Fee Increases, Access to Security Services)
• Internet2 Route Reports
• Internet2’s Project to Reduce the Number of Rejected Routes
• Routing Security

If you wish to attend office hours, email manrs@internet2.edu for the calendar invite and connection details.

Watch the video | Download the slides

Participants received updates to begin preparing for client certificate changes coming in August because of developments at the CA / Browser (CAB) Forum. The CAB Forum is the organization that coordinates common implementations for certificates across the web browsers.

• Will the changes impact email?
• How will eduroam be affected?
• Will other services be affected (VPN, science, etc.)?
• When do we have to go live?

Our speakers addressed these and other frequently asked questions about the changes coming in August to ensure they are prepared from day 1. 

Speakers: Tim Callan & Nick France, Sectigo

Moderator: Paul Caskey, InCommon/Internet2  

About the InCommon Certificate Service

The InCommon Certificate Service offers unlimited certificates for all the domains you own or control for U.S. higher education. The service is ideal for an enterprise-level deployment and offers both central control and delegated administration of ordering and managing certificates. More details are at the InCommon Certificate Service web page.

About Sectigo

Sectigo is one of the world’s largest and longest-standing Certificate Authorities (CA), trusted by more than 700,000 customers, including 36% of the Fortune 1000. We provide an industry-leading portfolio of digital certificates and a Certificate Lifecycle Management (CLM) solution that enables enterprises to manage public and private certificates issued by Sectigo and other CAs to secure every human and machine identity from a single platform.

Watch the recording | Download the slides

The InCommon Sirtfi Exercise Planning Working Group (SEPWG) offered a teaching session on what Sirtfi is but got more in depth as to how to institutionalize its practice in InCommon participants’ security teams. It’s more than publishing a security contact and checking the metadata box.

It requires that security teams are familiar with federation and Sirtfi expectations, when in many organizations the security teams and the identity and access management (IAM) teams more used to dealing with InCommon and federation are not integrated. IT leaders and IAM teams got ideas on how they need to work with their security teams to make their organizations Sirtfiably Sirtfi’d.

Speaker:

Kyle Lewis, co-chair, InCommon’s Sirtfi Exercise Planning Working Group (SEPWG) and vice president of cybersecurity strategy at InCommon Catalyst RDCT 

 Moderator: 

David Bantz, University of Alaska Statewide System, chair, InCommon Community Trust and Assurance Board (CTAB) and SEPWG co-chair

Watch the video | Download the slides

The NET+ team is pleased to announce the availability of NET+ Miro, a digital whiteboard platform enabling teams to easily brainstorm and collaborate from anywhere and at any time. Participants in this webinar learned about the new NET+ Miro service offering from members of the team that participated in the service evaluation.

Attendees also heard from a panel of participants in the NET+ service evaluation process and had an opportunity to ask  questions.

Speakers:

• Matthew D’Emilio, Director, University Contracts, Carnegie Mellon University
• Matthew Burgess, Director, Learning Technology Services, University of Virginia
• Adrian Casas & Brad Weiger, Solution Engineers, Miro

Moderator:

Quyen Vaillant, Program Manager, Internet2

InCommon BaseCAMP was geared toward those new to identity and access management (IAM), new to InCommon, or both. It’s the first stop on your path to learning more about IAM. This virtual workshop focused on the basics of identity and access management, an introduction to the InCommon Federation, and overviews and demonstrations of the community-developed identity and access management suite, the InCommon Trusted Access Platform.

The Virtual Residency Introductory Workshop 2023 was hosted through the University of Oklahoma (OU). Learn more about the event.

This high-level, hands-on virtual learning experience with AWS provided exposure to cloud services and terminology. This virtual course was designed for cloud computing beginners looking to facilitate or develop research workflows on the cloud.

The four-hour, virtual interactive course introduced the “what” and “how” of cloud computing for research using AWS. Participants had an immersive experience on the basic concepts of cloud computing and left with knowledge of how to compute, provision storage, and build research workflows in the cloud.

The Significance of Routing Security: Safeguarding the Critical Infrastructure webinar featured discussion regarding important aspects of network security, including route filtering, and anti-spoofing techniques.

Watch the video from the event

Watch the video | Download the slides

This special edition of IAM Online provided an overview of the key aspects of identity and access management in R&E, including IAM as a practice in higher education and essential functions of an IAM Practice.

It was just the right webinar for those needing  a brief refresher or a current or new member of your team does. As a bonus, the session took place just a few weeks before InCommon BaseCAMP 2023. It was a great primer for those attending that event.

Speaker:

Benjamin Rappleyea, manager, Office of Identity and Access Management, Illinois State University

Moderator: 

Marta K. Lang, senior IT manager, Identity & Access Management, The University of Texas at Austin

View the recording of this event!

These were the presentations from the event.

“The Early Routers and Interoperability” — Scott Bradner: The concept of deploying small special purpose computers (i.e. “routers”) to manage traffic in data networks had been around for decades, yet when it came time for the NSFNET interim backbone to be deployed in the mid 1980s commercially available devices were few.  And, there were not many options when the NSFNET speed was to be increased to T3 (45Mbps) in the early 1990s. This talk will explore the development of routers from the early 1960s to the devices used in the T3 NSFNET.

“Routing Software” – Susan Hares: The explosive growth in the number of NSFNET networks, and the complexity of the interconnections between them and to other national and international IP networks, challenged the internet community to develop appropriate routing algorithms and standards. This talk will chart the development of IP routing software over that tumultuous decade from 1985 to 1994.

“Gigabit Routers” – Craig Partridge: As the growth of the NSFNET / Internet exploded at the end of the 1980s, the Internet community realized that one of its many immediate challenges was router performance. At the time, routers were designed around a single processor and a single high-speed bus. The community realized this architecture would fail at data rates much over 2 Gbps, far below anticipated backbone router data rates in the near future. It was clear to almost everyone that future routers had to be built around a switched backplane, but it was not at all clear how to adapt IP routers to work on switched backplanes. Craig will talk about the router industry’s attempts to solve this problem and, after several mis-steps, the creation of the modern backbone router architecture.

Connection details will be available the week of May 15.

Participants joined us for a review the current state of InCommon’s identity and access management tools and services and learned more about our implementation plan and timeline for future innovations.

The InCommon Steering Committee is undertaking a strategic planning project (InCommon Futures 2.0) that will touch many community leaders in higher education IAM. The discussion addressed where InCommon is heading this year, the expected outcomes associated with the InCommon Futures 2.0 planning process, the current state of the planning process, and next steps. (This was an encore presentation of a session held at Internet2’s Community Exchange.)

 Speakers:

• Marc Wallman, vice president, Information Technology Division, North Dakota State University
• Ann West, associate vice president, Trust & Identity, Internet2

Moderator:

• Kevin Morooney, vice president of Trust and Identity and NET+ Programs, Internet2

Thank you for joining us for the Higher Education Cloud Forum, held May 10-12, 2023 at the Community Exchange and at Emory University in Atlanta, Ga.

This year’s Cloud Forum included an AWS Game Day event which was open to Community Exchange attendees as well. Learn more about the Higher Education Cloud Forum.

Thank you for joining us for the 2023 Internet2 Community Exchange, which was held May 8-11, Atlanta, Ga. Look for presentations from the event.

We are continuously posting session presentations from the event as they are made available!

The Advanced Research Computing (ARC) team at the University of British Columbia (UBC) explored various cloud platforms and solutions to help UBC researchers harness the power of the public cloud. After exploring these options, UBC transitioned its successful RONIN platform pilot to a full-service cloud offering for the UBC research community, becoming the first university in North America to do so.

Participants in this webinar learned about what ARC is and its role at UBC as well as the UBC researcher community and its challenges with public cloud using the user interfaces from current cloud providers. They also learned about UBC’s experience with RONIN and watched a live demo of what researchers just starting out will experience on RONIN and what it takes to set up their workflow in a cloud environment.

Participants learned more about  recent updates to the InCommon Certificate Service and joined fellow subscribers for a community conversation via webinar.

About the InCommon Certificate Service

The InCommon Certificate Service offers unlimited certificates for all the domains you own or control for U.S. higher education. The service is ideal for an enterprise-level deployment and offers both central control and delegated administration of ordering and managing certificates.

About Sectigo

Sectigo is one of the world’s largest and longest-standing Certificate Authorities (CA), trusted by more than 700,000 customers, including 36% of the Fortune 1000. We provide an industry-leading portfolio of digital certificates and a Certificate Lifecycle Management (CLM) solution that enables enterprises to manage public and private certificates issued by Sectigo and other CAs to secure every human and machine identity from a single platform.

Using the InCommon Trusted Access Platform packaged version of COmanage Registry, participants learned how to model their organization and set up enrollment flows. This hands-on virtual workshop provided a conceptual understanding of COmanage, an identity registry with flexible enrollment and lifecycle management capabilities that helps you meet your identity management objectives. The workshop provided the technical know-how to get this solution up and running.

Watch the video from Routing Integrity webinar

View the presentation

Approximately 45% of the IP networks in the Internet2 community lack an ARIN (American Registry for Internet Numbers) agreement. Without this agreement, these networks are unable to take advantage of ARIN’s routing security services. Over time, these security services are becoming a critical component of how our community ensures a reliable and resilient network.

Participants discussed this critical topic. Continued participation is essential to ensure that we, as a community, work together to address this issue – potentially saving the community millions of dollars to strengthen routing security.

Participants joined us for the 2023 Presidential Primary Sources Project (PPSP) sessions. These were free, virtual sessions are for students grades 4-12.

The April sessions featured women’s rights in the 1970s, the boyhood of Abraham Lincoln, the birthplace of Abraham Lincoln, and First Lady Rosalynn Carter.

midPoint, powered by Evolveum, is a general-purpose identity management and governance system that can synchronize and reconcile among multiple systems of record and sources of identity. Core features include creating and managing groups, organizational units, and user accounts. midPoint is designed to help build a unified identity layer on top of your existing infrastructure. It can import accounts and entitlements from source systems, apply policies and other rules, and then provision the result to the whole infrastructure. midPoint is used in the InCommon Trusted Access Platform architecture as the registry that creates and manages unique institutional identities and for provisioning/de-provisioning of users and their authorization to applications.

Webinar attendees participated in a briefing on the InCommon Community’s readiness to support NIH. In Fall 2020, leaders from NIH first addressed the InCommon community about the benefits of researchers using InCommon-enabled credentials from their institutions. Participants received an update on our progress thus far and what’s next as NIH considers issuing its first identity assurance requirement.

Speakers:

• Jeff Erickson, Chief of Identity and Access Management Services, National Institutes of Health
• Tom Barton, InCommon Research Consultant, Internet2
• Ann West, AVP, Trust & Identity, Internet2 (moderator)

Panelists shared their experiences with the InCommon Collaboration Success Program (CSP) program and how it is helping them to achieve their IAM goals. They discussed how they got involved with Internet2/InCommon and what led them to the Collaboration Success Program as well as shared the highlights of their CSP project work.

 Speakers:

•  Erik Coleman, IAM Architect, University of Illinois – Urbana-Champaign
• Anne Tacazon Interim Business Service Manager, Identity & Access Management, University of Washington

 Moderator: 

Jean Chorazyczewski, Director, InCommon Academy

This next  of the new CLASS Advanced program, Internet2’s advanced cloud training tailored for research IT, began April 3, 2023. This two-week intensive learning experience empowered the research and higher education community to leverage cloud platforms for research workflows. Participants learned how to effectively build and manage cloud computing resources for Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).

As organizations reach a tipping point, the only viable option forward is to modernize the network. The goal is to create a network environment with the capabilities to enable the institution’s research, academic, and administrative missions over the long term. Combining this approach with forward looking financial planning for a sustainable funding model, the historical cycle of technical debt and deferred maintenance can be broken. Participants learned how University of Illinois of Chicago worked with Vantage Technology Consulting Group to develop an actionable plan to modernize the network and the funding model.

View the event recording

Download the presentation

InCommon Academy offered its inaugural training opportunity for this COmanage software component. COmanage Match performs identity de-duplication to help minimize the creation of duplicate accounts for the same individual. This cross-system matching engine provides a heuristic-based system for matching identity and other records across multiple authoritative systems of record.

This workshop taught you all you need to know to get started with COmanage Match. Match can be used with Registry or as a standalone product complementary to your other tools.

The Minority Serving – Cyberinfrastructure Consortium (MS-CC) held a two-day IT for research and cybersecurity workshop at the Ministers Hall on the Claflin University campus in Orangeburg, S.C.

This virtual course was designed for cloud computing beginners looking to facilitate or develop cloud research workflows. CLASS Essentials for GCP was a virtual, four-hour, hands-on learning experience.

This virtual course was  designed for cloud computing beginners looking to facilitate or develop cloud research workflows. CLASS Essentials for Microsoft Azure was a virtual, four-hour, hands-on learning experience.

This discussion covered  common challenges in implementing learner or researcher credentials using new technologies, including differences and similarities between the U.S. and Europe; the next steps that the R&E community needs to take to prepare for this future direction, how existing academic federations fit into this space, and what colleges and universities can do to begin preparing for this future.

View the presentation | Watch the video

What is “Cyberinfrastructure,” and who needs it? In this presentation, we introduced Cyberinfrastructure (CI) as IT resources and support for data-intensive research and education activities. We also discussed the variety of stakeholders – on-campus and beyond – who benefit from campus CI capabilities and are important to consider when constructing a campus CI Plan. Learn more about the Minority Serving-Cyberinfrastructure Consortium.

This virtual course was designed for cloud computing beginners looking to facilitate or develop research workflows on the cloud.

Grouper simplifies access management by automating changes to access privileges as a person’s role changes. This training workshop focused on learning and using core features of the InCommon Trusted Access Platform packaged Grouper software to implement the access control models described in the Grouper Deployment Guide. The sessions included a mix of self-paced learning, lectures, hands-on training, and discussion. The modules started with Grouper basics and progress through new features, access governance, security model, and administration.

Kion and Internet2 brought together two universities in our March 1 webinar, Achieving Multi-Cloud Control and the Freedom to Innovate. We discussed the people, practices, planning, and tooling they’re using to manage their multi-cloud implementations and enable their teams to get work done.

Watch the video

Please join members of the Internet2 executive team and Internet2 consultant Ron Kraemer for one of two virtual town hall meetings on February 22 or February 23 from 3 pm – 4 pm ET to hear updates and progress on the Internet2 Five-Year Roadmap process. 

Registration is required and you will receive Zoom credentials once you complete your registration. Learn more about the town halls.

Shibboleth provides single sign-on capabilities for local, distributed, and cloud services. This virtual workshop focused on the InCommon Trusted Access Platform packaged software — including configuration and operation. Both the Identity and Service Provider packages can be pre-configured to integrate out of the box with the InCommon Federation using recommended defaults.

Watch the video | Register for IAM Online webinars

Long-time users of Grouper, the IAM team at University of Wisconsin–Madison, played a key role in the university’s Interoperability Transformation Initiative, which aimed to modernize the ways people connect while managing digital infrastructure and services at pace and scale. One of its key outcomes was moving Grouper from on prem to hosting it in AWS. Now the team is in the process of implementing midPoint as a mechanism for offering campus stakeholders central provisioning and deprovisioning options and infrastructure. Additionally, the team has engaged in policy development to define standard populations for their campus constituents. Members of the UW–Madison IAM team will join us for IAM Online where they will share the strategy and methodology behind their work, including:

• Moving Grouper from on prem to the cloud
• Implementing midPoint for provisioning and deprovisioning
• Standardizing populations and migrating services to use new standards

What aspects of the team’s approach might be applicable to your institution? Learn more and bring your questions.

Moderator:

Erik Coleman, IAM Architect, University of Illinois – Urbana-Champaign

Speakers:

• Abrianna Barca, Associate Director, Identity and Access Management
• Ryan Larscheidt, IAM Technical Lead,
• Andrew Parmer,  IAM Technical Lead
• Oakes Dobson, IAM Engineer

Amazon Omics helps healthcare and life science organizations and their software partners store, query, and analyze genomic, transcriptomic, and other omics data and then generate insights from that data to improve health and advance scientific discoveries.

Learn how Amazon Omics provides scalable workflows and integrated tools for preparing and analyzing omics data and automatically provisions and scales the underlying infrastructure so that you can spend more time on research and innovation. Amazon Omics supports large-scale analysis and collaborative research.

This session is for research decision-makers, researchers, and RCD team members who want to learn how Amazon Omics can accelerate research, support large-scale analysis, and generate insights to improve health and advance scientific discoveries.

Speaker: Lee Pang, Principal Solutions Architect – Health AI, AWS

Google, Internet2, and Carahsoft gave a presentation on a variety of strategies that can help your institution reduce costs while using Google Cloud Platform (GCP). They provided insights into how using the latest cloud solutions can help your institution to cost-effectively support individual projects, for research or enterprise, or across all of campus.

Featured Speakers: 

Flora Huang, team lead, customer engineer, Google Cloud

Bob Flynn, program manager, Cloud Infrastructure & Platform Services, Internet2

Watch the video

We kicked off our 2023 IAM Online webinar series with an hour of insights from InCommon Catalysts. Participants heard their expert analysis of how current trends in identity and access management will play out in the year ahead as well as their forecast for what’s next.

The 2022 Internet2 Technology Exchange was held from December 5-9 in Denver, Colo.