connect (uninett-konferansen, tromsø)
TRANSCRIPT
![Page 2: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/2.jpg)
Feide75 mill innlogginger
(2014)
~ 380utdannings
institusjoner
Web Single Sign-On
~ 300tjenester
![Page 3: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/3.jpg)
Web SSOBasic userinfo
Groups
Authentication and authorization of APIs
Desktop applications
Mobile applications
Long-lived sessions / access
Guest accounts
IDporten *
International login (eduGAIN) *
Feide Connect
![Page 4: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/4.jpg)
Identitet
Grupper, emner,
sted, rom, tid, ++
Aksess,
tilgangsstyring
og kontroll
Lettvekts, utviklervennlige APIer
OAuth + OpenID Connect
Hva er kjernen vi skal bygge en god bærekraftig
IKT-arkitektur rundt ?
![Page 5: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/5.jpg)
Feide
…
Connect
Connect
![Page 6: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/6.jpg)
OAuth 2.0, OpenID Connect + APIs
Connect v1
Authentication
Feide IDporten gjestebrukereeduGAIN
Groups
FSFeide
Future services..
PeopleSearch
API Gatekeeper
adhoc
ClientsApplications Services
Service X
Service Y
Service Z
![Page 7: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/7.jpg)
Prosjekt: ut 2015
– Teknologi og teknisk løsning – Avtaleverk, juss og personvern – Pilot som starter 1. Juni
Prosjektleder: Hildegunn Vada
– Overlevere produkt, og system til drift og utrullingsaktivitet
Referansegruppe med bred deltagelse i sektoren. Samarbeid med IKT-senteret Koordineres med UH-sky
![Page 8: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/8.jpg)
selvbetjening - skalerbarhet
![Page 9: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/9.jpg)
Developer-friendly APIs
REST, OAuth 2.0
No XML, no xmlsec, no SOAP
![Page 10: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/10.jpg)
Login flow
Replacement of the current Feide Consent page
![Page 11: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/11.jpg)
![Page 12: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/12.jpg)
mer brukerstyrt
![Page 13: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/13.jpg)
Enterprise IdM User Centric
Batch provisioning Dynamic DataAPIs
Få store tjenester Mange små spesialiserte tjenester
Trends
![Page 14: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/14.jpg)
XMLJSON
SOAPRESTXMLDSIG
JWT/JWS
WS-Security / ID-WSF OAuth
SAMLOpenID Connect
Noen trender – API teknologi
![Page 15: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/15.jpg)
Mobile
![Page 16: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/16.jpg)
FeideSingle Sign-On session
= 8 hours
![Page 17: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/17.jpg)
Tjenester
med interaksjon mellom brukere ikke bare mellom bruker og tjeneste
› Personsøk › Grupper
![Page 18: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/18.jpg)
API for person lookup – white pages
Find people by search for name, and pick «contact cards».
In use for collaboration services, where people interact with each other.
18
![Page 19: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/19.jpg)
Grupper
![Page 20: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/20.jpg)
Person Medlemskap / rolle Gruppe Gruppetype
http://openvoot.org
![Page 21: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/21.jpg)
Person Medlemskap / rolle Gruppe Gruppetype
GOUndervisningsgruppe
Ad-Hoc gruppe UHStudieretning
Tilknyttet skole X
http://openvoot.org
![Page 22: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/22.jpg)
22
Groups Manage
ad-hoc groups
using groups and peoplesearch
APIs
![Page 23: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/23.jpg)
API Gatekeeper
![Page 24: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/24.jpg)
24
etherpad demotjeneste
![Page 25: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/25.jpg)
Account versus
Person
FeideID, fødselsnummer, overgang fra grunnskole til vgs til høyskole,
utvekslingsstudenter, høyskoler som slåes sammen, kommuner som slåes sammen.
![Page 26: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/26.jpg)
Pilot Startet 1. juni 2015
Muligheter for tjenstelevandører å koble seg til en funksjonell plattform.
Kontakt [email protected] Mer info feideconnect.no
![Page 27: Connect (UNINETT-konferansen, Tromsø)](https://reader034.vdocument.in/reader034/viewer/2022052317/55b40e95bb61eb20728b46b5/html5/thumbnails/27.jpg)
Andreas Åkre Solberg linkedin.com/in/andreassolberg
http://feideconnect.no