Identity Management University of Limerick Experience Presented By Eugene Murnane Eamonn T Fitzgerald Technology Solutions Group Information Technology Division University of Limerick Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Agenda • Common Problems • Provisioning Student Accounts (UL Experience) • Provisioning Students E-Mail Accounts • Provisioning Staff AD accounts • International Equine Institute Case Study • Future Plans • Questions Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Using Active Directory Credentials Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Common Problems with Identity Management Ownership of data Merging data from different sources Access to files & Printers Single sign-on Definitive data source Managing AD & e-mail accounts Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Provisioning Student Active Directory Accounts • Data source: Student Records System • Accounts updated nightly • Accounts created via ID Card • Disable non current student accounts • Graduate student accounts are deleted manually once a year • Reset Password using ID card or web • Password expiry e-mail alert Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Student Account Attributes AD Attributes updated: cn user. Principal. Name Mail sn proxy. Addresses sam. Account. Name given. Name AD Attributes used to populate dynamic distribution groups in Microsoft Live@Edu: extension. Attribute 1 = “Student” extension. Attribute 2: Course Code(s) extension. Attribute 3: Year(s) of study extension. Attribute 4: Advisor group extension. Attribute 5: Registered Modules Heading Sub Date HEANet National Networking Conference – 2009 12 th November HEAnet & 13 Nov And Date 2009
Provisioning Student E-mail Accounts • Microsoft Live@Edu Outlook Live Accounts • Data Source: Active Directory • Microsoft GALSync 2010 on ILM 2007 creates and updates Outlook Live accounts. Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Provisioning Student E-mail Accounts • AD => Outlook Live One-way Password Synchronisation (PCNS) • Startsync runs every 10 minutes • Single Sign-on access on-campus Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Provisioning Staff Active Directory Accounts • Data sources: HR database; logged information • ITD Service Desk create and update accounts • Requests for new accounts are logged in RMS • Inactive accounts automatically disabled after 180 days • Inactive accounts automatically deleted after 400 days • Reset password via web page www. ul. ie Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
International Equine Institute Case Study • The International Equine Institute wanted restricted access to videos uploaded onto HEAnet hosted site (http: //media. heanet. ie) • Use UL credentials to access videos • Use Shibboleth to authenticate UL users • Build Identity Provider Server Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Server Configuration • Virtual server running on VMware ESX 4. 0 clustered platform • Shibboleth 2. 0 • Red Hat Linux ES 4. 0 • Apache Tomcat 5. 5 • Apache 2. 2 • Apache Tomcat (JK) Connector (config files to update /etc/httpd/conf. d/jk. conf and /etc/httpd/conf. d/ssl. conf) • SSL certificate obtained from Globalsign via HEAnet Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Managing Accounts – Future Plans • Use Microsoft Identity Lifecycle Manager to provision accounts (instead of programming) • Staff Accounts to be provisioned from HR database • Student Accounts to be provisioned from Student Records Database • Use ILM to integrate Student Records System with: – Student ID Card System – Door Lock System • Implement Single Sign-on for Student Records System Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Links http: //Media. heanet. ie http: //Edu. Gate-Pilot. heanet. ie/rr Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Questions ? Heading Sub Date HEANet National Networking Conference – 12 th November And Date 2009
Скачать презентацию Identity Management University of Limerick Experience Presented By
132b6ddaef866682112e7e52b80c0b5b.ppt