Stanford University

Stanford University

How today's Registrar demands more from Identity Management Policy and Infrastructure

Thomas BlackBruce Vincent

Stanford University 2

Basic Concepts

Identity Management (in general)

Trust Confederation

InCommon

Shibboleth

Stanford University 3

Three Use Cases

A.S.P.s

Admissions Service Providers

Authorization of Identity in Perpetuity

Stanford University 4

A.S.P.s (Application Service Providers)

CollegeNet: What Do You Think? On-line Course Evaluation System Students and Faculty Access Surveys and Compiled Reports

National Student Clearinghouse On-line Enrollment Certification & Degree Verification Students and Staff Access Student Data

Stanford University 5

W.D.Y.T.

Point of Dependency: File Exchanges

Participants must be introduced to the system in advance of launching the site each term.

Enrollment and Instructor data must be current at the 11th hour...

Stanford University 6

Data file provided to CollegeNet to ‘prime’ WDYT

Stanford University 7

Logging into our portal

Stanford University 8

Authenticating into web portal

Stanford University 9

Navigating to course and section evaluations

Stanford University 10

Course evaluation data presentation

Welcome, Professor Alchemist!

Stanford University 11

N.S.C.

Manual Account Setup and Active Account Problem:

Institutional contact fax’s the identity information to NSC to set up accounts.

Institutional contact is charged with notifying NSC if an account should be removed

Stanford University 12

Questions?

Stanford University 13

Responding with Policy, Process and Technology

The Need: Provide more services, leverage more service providers while improving security

Predefined trust relationship Data standards for exchange Control of disclosure Adequate level of assurance

Stanford University 14

Responding with Policy, Process and Technology

The Need: Support the university in maintaining a lifelong relationship with students

Persistent Identifiers (no reuse of certain identifiers) Continuing to serve as identity provider Reestablishing connection between identity and identifier Ability to evolve name of individual

Stanford University 15

Responding with Policy, Process and Technology

Stanford University 16

Admissions Service Providers: LSDAS & AMCAS

Nearly all applicants to Law and Medical Schools must use these services, respectively, in order to be considered for admission.

Gateway Duplicative Inefficient Unnecessary

Stanford University 17

Transcript Ordering: LSAC & AMCAS

FERPA

Need for an electronic signature

Electronic response

Students,Graduates

identity data

elect. doc. xmision

request

electronicrequest & response

1

2

3

AMCAS /LSDAS /

any school

StanfordUniversity

add info request document

authenticated

Stanford University 18

Authorizations for Life

Permanently Active Authorization Services

School to School: transcripts & certifications

Out-of-Boundary? Vendors: music; videos, cars; tech components; journal

clearinghouses Services: insurance

Stanford University 19

Questions?