Shibboleth Pilot

1. Shibboleth Pilot CAMP Phoenix, AZ February 5, 2009

2. Agenda • Stanford Overview • Clearinghouse Overview • Pilot Phase I: Student Self-Service • Pilot Phase II: Staff Access

3. Stanford University • Private research University founded in 1891 • Our Student Body • 7,071 Undergraduates • 8,511 Graduates • 15,582 Total • Our Faculty • 1,291 Tenure-line faculty • 65 Academic departments and interdisciplinary programs • Over 4,000 classes scheduled each quarter

4. National Student Clearinghouse • A non-profit organization serving as a centralized educational agent in fulfilling educational reporting needs • Mission: We serve the education community (3,100 or 91%) by facilitating the exchange and understanding of student enrollment, performance and related information.

6. Student Access

7. What Students Can Access wide range of enrollment verification activities via the Web for free, including: • Print enrollment certificates (which they can send to health insurers, housing providers and others)  • View enrollment history • Check enrollment verifications that the Clearinghouse has provided to student service providers on their behalf • View student loan deferments  • Link to real-time information on their student loans via Meteor

8. Current Implementation:

9. Axess, Our Student Portal

10. Current Authentication Screen

11. Axess Services

12. Hand-0ff Screen to the Clearinghouse

13. Instantiated at the Clearinghouse

14. Challenges of Student Access Model (500 institutions using Student Self Service) • Requires custom coding at each institution  • Disparate authentication methods deployed by institutions • Clearinghouse places a high level of trust with institutions to properly authenticate students • Clearinghouse uses a proprietary method for establishing sessions

15. Pilot Phase I: Student Access (School First)

16. Pilot Phase I: Student Access (NSC First)

17. New Model Implementing Shibboleth will provide: • Easier implementation for participating InCommon institutions • A robust, common framework for authentication and transitive trust • A federation that governs rules for access and participation • A system based on industry standards

18. Staff Access

19. What Staff Can Access wide range of information activities via the Web: • Core: Data Transmission Info • Transmission schedules; history of Transmissions; history of government reporting: SSCR’s • Student Look-up • Info provided on…; info reported out on… • Degree Verification Info • Verification schedules, history of verifications, statuses & counts of verifications • Student Tracking Info • Inquiries: financial aid-related, admissions-related, institutional research-related • Enrollment Verification • Summary of Third Party Processing, student self-service requests

20. Sign-on Screen

21. Challenges of Staff Access model (Maintaining over 175,000 user accounts with multiple roles from 3,100 participating institutions)  • Provisioning new accounts • Password resets  • Modifying user roles • Ensuring that user accounts are deleted when user leaves an institution

22. Pilot Phase II: Staff Access

23. Staff Authenticating Locally

24. Passed through to the Clearinghouse…

25. New Model Implementing Shibboleth will provide: • Allows institutions to control process for adding new accounts and managing passwords • Allows institutional roles to be mapped to Clearinghouse roles to control Website access • Immediately revokes Clearinghouse Website access when staff access is removed at the institution

26. What We’ve Learned So far …not there yet! • Target ID must be the Institutional ID (for now): • Adopted PESC and Dept. of Ed. Standard • Move from known ID to opaque target ID • Consult w/ Internet2 standards community • Staff User Interface will change: • Target ID Field (Sept.) • Need to devise an easy way to translate IDs

27. Questions? Contact: Thomas Black Stanford University tblack@stanford.edu Doug Falk National Student Clearinghouse falk@studentclearinghouse.org