Re: Questions about Shibboleth

[Eric Weakland <eric () AMERICAN EDU>]

Christopher,

We set up our IDP about 2 years ago.  It has been worth it.  Let me know 
if you want longer, detailed answers on any of these and we can set up a 
call.

1.       Ease of setup and configuration
        A: Pretty steep learning curve at first, we looked for a vendor to 
partner with who had experience and was already an incommon member (SP) to 
help us get our IDP set up.  That technique worked pretty well.
 
2.       Maintenance:  Amount of time and effort to manage
        A: Low.  Assign explicit responsibility for keeping on top of 
InCommon updates/mailing list.

3.       Overall impressions on effectiveness
        A: High - having a standard authentication method for cloud/hosted 
services has been very useful.  Helps us avoid the custom solution 
resource drain.  Also helps avoid unexpected changes from a vendor.  Yay 
standards.

Best,


Eric Weakland, CISSP, CISM, CRISC
Director, Information Security
Office of Information Technology 
American University
eric at american.edu
202.885.2241

______________________________________
AU IT will never ask for your password via e-mail. 
Don't share your password with anyone!




From:   Christopher Jones <Christopher.Jones () UFV CA>
To:     SECURITY () LISTSERV EDUCAUSE EDU, 
Date:   03/20/2013 12:51 PM
Subject:        [SECURITY] Questions about Shibboleth
Sent by:        The EDUCAUSE Security Constituent Group Listserv 
<SECURITY () LISTSERV EDUCAUSE EDU>



For those of you who are currently using Shibboleth, I am interested in 
getting your feedback.  With a focus on the Identity Provider component, I 
am interested in hearing about:
 
1.       Ease of setup and configuration
2.       Maintenance:  Amount of time and effort to manage
3.       Overall impressions on effectiveness
 
Thank you in advance for sharing your experience.
 
Christopher Jones
IT Security Analyst
University of the Fraser Valley
Christopher.Jones () ufv ca