OpenAthens Service Provider in the cloud: development update
Download as PPTX, PDF1 like333 views
The document outlines a webinar on OpenAthens, a web-based single sign-on and identity management service providing seamless access across multiple federations using SAML. It discusses the evolution of OpenAthens, emphasizing simplification of setup, registration, and improvements in user experience while transitioning to cloud-based APIs. The upcoming releases will enhance user discovery options and provide a federated discovery service to address common complaints regarding complexity and inconsistent experiences.
OpenAthens Service Provider in the cloud: development update
- 1. www.eduserv.org.uk/openathens OpenAthens Cloud SP Webinar 24 May 2016 Phil Leahy – OpenAthens Service Relationship Manager David Orrell – OpenAthens System Architect
- 2. • What is OpenAthens? • Where next for OpenAthens SP? • Questions
- 3. OpenAthens • Web-based Single Sign-On (SSO) and identity management • Connect to multiple federations/communities using Open Standards (SAML)
- 4. OpenAthens advantages • For organisations/users • Single account, seamless access across sites • For publishers • Integrate once, connect to multiple communities
- 5. OpenAthens OrganisationService Provider Sign-on using OpenAthens Attributes
- 6. Attributes • Where is the user from? • Who is the user (pseudonym)? • User’s role or entitlement • Name/email etc. Organisation (Identity Provider) Service Provider Attributes via SAML
- 7. SAML federations Service providers Identity Providers
- 9. Where next for OpenAthens SP? 1. Simplification of setup and registration 2. Move from ‘installed software’ to APIs • OAuth/OpenID Connect 3. Improving the user-experience
- 11. Single Dashboard Service Provider Federation
- 12. Simplifying setup • Guided setup process in dashboard • Clearer sign-posting of steps • Much improved documentation • Near instantaneous updates • Faster turn-around on testing
- 13. Simplifying registration • Registering for OpenAthens Federation • Happens automatically • We are working with other Federations to simplify registration Phase 1 due this summer
- 14. APIs, APIs, APIs
- 15. OpenAthens SP today Identity provider Identity provider Identity provider Application SAML OASP Service Provider Integration API Environment: Apache, Java, .NET
- 16. OpenAthens SP today • Current software modules isolated from application • Inside server module or servlet filter • Limited APIs to code against • Software has ‘heavy-lifting’ to do • SAML metadata • Metadata changes slow to take effect
- 17. Next release: OpenAthens SP Cloud Identity provider Service Provider Identity provider Identity provider SAML connector App1 App2 App3 SAML OAuth/OpenID Connect REST Multiple applications can share the same connector SAML connector available as a service
- 18. • Dashboard provides • Configuration • Access to logs • Usage statistics • Add additional applications without having to register multiple SAML entities Next release: OpenAthens SP Cloud
- 19. User experience
- 20. Where are you from? • Users presented with too many options • “OpenAthens login” • “Shibboleth login” • “Institutional login” • “Choose your federation” • Drop-down lists of organisations • Search for organisation • … • Users often don’t even understand the question!
- 21. Current issues • One of the most common complaints about Federated sign-in • Too complex for users • Inconsistent experience • A chore for service providers to develop
- 22. Current options for discovery • Use a Federation discovery service • Does not work across multiple federations • Does user know their federation? • Build your own using OpenAthens SP API • Build your own using your own data
- 23. OpenAthens SP Cloud • “Federated discovery as a service” • Configure and brand via dashboard • Delivered via: • Standalone hosted service • Embeddable JavaScript widget • REST APIs available to build your own • Independent of a given federation but will support any
- 24. Phase 1 due this summer Phase 2 due late 2016/early 2017
- 25. www.eduserv.org.uk/openathens If you have questions, please enter them here
- 26. OpenAthens Cloud SP beta • Register your interest in the webinar poll • Email Phil Leahy: phil.leahy@eduserv.org.uk