Organising federated identity in Finnish higher education
CSC the Finnish IT Center for Science, P.O. box 405, FI-02101 Espoo, Finland
e-mail: mikael.linden@csc.fi
DOI: 10.12921/cmst.2005.11.02.109-117
OAI: oai:lib.psnc.pl:586
Abstract:
Finnish higher education has been an early adopter of federated identity in Europe. The Finnish Haka federation is deploying Shibboleth, federating software by Internet2. This paper describes the federation as an organisational entity and explains how privacy issues are taken into account in its policy. Differences between the Haka federation and some other federations are pointed out. The main service areas for federated identity in Finnish higher education are also presented
Key words:
References:
[1] InCommon Federation. InCommon glossary http://ww.incommonfederation.org/glossary.cfm Referenced 2.5.2005.
[2] InQueue Federation. http://inqueue.internet2.edu/ Referenced 2.5.2005.
[3] International Middleware Event. Australia Position Paper. http://www.jisc.ac.uk/uploaded_documents/Australia_Positio nPaper.doc Referenced 2.5.2005.
[4] M. Linden, P. Linna, M. Kivilompolo, J. Kanner, Lessons Learned in PKI implementation in Higher Education. Proceedings of EUNIS2002, the 8th International Conference of
European University Information Systems, Portugal, 246-251, 2002.
[5] M. Linden, Towards Cross-Organisational User Administration. Informatica 27, 353-359 (2003).
[6] SWITCH Authentication and Authorization infrastructure. Architecture Evaluation. January 2003. http://www.switch.ch/aai/pilotdocs/Arch_Eval_v10.pdf
[7] The Finnish Haka Project. Conclusions and Proposals of Action. February 2004.
http://www.csc.fi/suomi/funet/middleware/english/HAKAfinal_report.pdf
[8] The Ligue des Bibliothèques Européennes de Recherche. LIBER Licensing Principles for Electronic Information. http://www.kb.dk/liber/news/981116.htm Referenced 2.5.2005.
[9] Trans-European Research and Education Networking Association. Terena Technical Report TF-Mobility. Inter-NREN roaming. Final Report. 2004. http://www.terena.nl/tech/task-forces/tfmobility/Deliverables/TF-MobilityfinalReport.pdf
[10] Educause. “eduPerson Object Class”. http://www.educause.edu/eduperson Referenced 2.5.2005.
[11] K. Koivu, Learning management systems in use in Finnish universities, June 2004. Available in Finnish: http://www.uta.fi/itpeda/Raportit/koko_kartoitus101103.pdf
[12] D. Gollman, Computer Security. John Wiley & Sons, Inc, New York, 1999.
[13] Merriam-Webster’s Online Dictionary. http://www.britannica.com/dictionary Referenced 2.5.2005.
[14] Haka Federation. Service Agreement for Federation Members.
http://www.csc.fi/suomi/funet/middleware/english/Referenced 2.5.2005.
[15] Liberty Alliance Project. Circles of Trust: The Implications of EU Data Protection and Privacy Law for Establishing a Legal Framework for Identity Federation. February 2005. http://www.projectliberty.org/specs/Circles_of_Trust_LegalFramework_White Paper_322200522576.pdf
[16] The UK Information Commissioner. Data Protection Act 1998. Legal Guidance.
http://www.informationcommissioner.gov.uk/cms/DocumentUploads/Data%20Protection%20Act%201998%20Legal%20Guidance.pdf Referenced 2.5.2005.
Finnish higher education has been an early adopter of federated identity in Europe. The Finnish Haka federation is deploying Shibboleth, federating software by Internet2. This paper describes the federation as an organisational entity and explains how privacy issues are taken into account in its policy. Differences between the Haka federation and some other federations are pointed out. The main service areas for federated identity in Finnish higher education are also presented
Key words:
References:
[1] InCommon Federation. InCommon glossary http://ww.incommonfederation.org/glossary.cfm Referenced 2.5.2005.
[2] InQueue Federation. http://inqueue.internet2.edu/ Referenced 2.5.2005.
[3] International Middleware Event. Australia Position Paper. http://www.jisc.ac.uk/uploaded_documents/Australia_Positio nPaper.doc Referenced 2.5.2005.
[4] M. Linden, P. Linna, M. Kivilompolo, J. Kanner, Lessons Learned in PKI implementation in Higher Education. Proceedings of EUNIS2002, the 8th International Conference of
European University Information Systems, Portugal, 246-251, 2002.
[5] M. Linden, Towards Cross-Organisational User Administration. Informatica 27, 353-359 (2003).
[6] SWITCH Authentication and Authorization infrastructure. Architecture Evaluation. January 2003. http://www.switch.ch/aai/pilotdocs/Arch_Eval_v10.pdf
[7] The Finnish Haka Project. Conclusions and Proposals of Action. February 2004.
http://www.csc.fi/suomi/funet/middleware/english/HAKAfinal_report.pdf
[8] The Ligue des Bibliothèques Européennes de Recherche. LIBER Licensing Principles for Electronic Information. http://www.kb.dk/liber/news/981116.htm Referenced 2.5.2005.
[9] Trans-European Research and Education Networking Association. Terena Technical Report TF-Mobility. Inter-NREN roaming. Final Report. 2004. http://www.terena.nl/tech/task-forces/tfmobility/Deliverables/TF-MobilityfinalReport.pdf
[10] Educause. “eduPerson Object Class”. http://www.educause.edu/eduperson Referenced 2.5.2005.
[11] K. Koivu, Learning management systems in use in Finnish universities, June 2004. Available in Finnish: http://www.uta.fi/itpeda/Raportit/koko_kartoitus101103.pdf
[12] D. Gollman, Computer Security. John Wiley & Sons, Inc, New York, 1999.
[13] Merriam-Webster’s Online Dictionary. http://www.britannica.com/dictionary Referenced 2.5.2005.
[14] Haka Federation. Service Agreement for Federation Members.
http://www.csc.fi/suomi/funet/middleware/english/Referenced 2.5.2005.
[15] Liberty Alliance Project. Circles of Trust: The Implications of EU Data Protection and Privacy Law for Establishing a Legal Framework for Identity Federation. February 2005. http://www.projectliberty.org/specs/Circles_of_Trust_LegalFramework_White Paper_322200522576.pdf
[16] The UK Information Commissioner. Data Protection Act 1998. Legal Guidance.
http://www.informationcommissioner.gov.uk/cms/DocumentUploads/Data%20Protection%20Act%201998%20Legal%20Guidance.pdf Referenced 2.5.2005.
