Some illustrative uses of federation involving the UW Shibboleth Identity Provider for authentication and attribute exchange.
Service |
Provider |
Description |
|---|---|---|
Logins to Catalyst Web Tools use Shibboleth for cross-organizational authentication and collaboration, using trust metadata provided by the InCommon federation. Catalyst designed and incorporated a custom "Where Are You From" service into their login process to allow visitors to select their affiliated identity provider. Catalyst currently supports logins from the UW IdP or ProtectNetwork, an "open" identity provider in the InCommon federation. The UW IdP's attribute release policy sends eduPersonPrincipalName to Catalyst for authentication. |
||
Logins to Microsoft DreamSpark use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation to Microsoft for federated verification of student enrollment and privacy-preserving eduPersonTargetedID values for record keeping. |
||
Logins to WebAssign @ Washington use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy only permits logins for users associated with participating UW Chemistry and UW Physics courses; if permitted, an eduPersonEntitlement attribute for the course is sent to WebAssign with eduPersonPrincipalName, name, and UW student number. |
||
UW Technology & Central Admin Wikis |
Logins to the UW Technology and Central Admin Confluence wikis use Shibboleth and trust metadata provided by the InCommon federation. A custom "Where Are You From" service allows visitors to select and login using any participating IdP in the InCommon federation; the UW IdP is the default choice. The UW IdP's attribute release policy sends eduPersonPrincipalName to these wikis for authentication. |
|
StudentsOnly uses Shibboleth and trust metadata provided by the InCommon federation to verify student enrollment through federated logins. The UW IdP's attribute release policy sends name, email, and eduPersonScopedAffiliation to StudentsOnly for identity matching and automated student enrollment verification. |
||
Logins to the Database of Recorded American Music (DRAM) use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation to DRAM for eligibility verification, restricting release to the "member" value for current UW students, staff, and faculty. |
||
Logins to RefWorks use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation and privacy-preserving eduPersonTargetedID values to RefWorks for eligibility verification and record keeping. |
||
Logins to the UWare Store use Shibboleth and a bi-lateral trust arrangement between the UW IdP and e-academy.com (a software fulfillment company). The UW IdP's attribute release policy sends eduPersonScopedAffiliation and privacy-preserving eduPersonTargetedID values to e-academy for eligibility verification and record keeping. |
||
Logins to the Internet2 Confluence Wiki involve a "Where Are You From" choice by the visitor. This step allows visitors to select their identity provider. When UW members select the UW IdP, the resulting logins use trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonPrincipalName for authentication to the wiki. |
||
CFD 2006 GivingStation |
Logins for UW employees to the Washington State Combined Fund Drive's GivingStation for the 2006 campaign used Shibboleth and a bi-lateral trust arrangement between the UW IdP and CreateHope. The UW IdP's attribute release policy sent UW Employee ID to CreateHope for eligibility verification and reporting to the UW and to the state of Washington. |
|
Ctrax Music Service |
The registration to the former Ctrax Music Service used Shibboleth with trust metadata provided the InCommon federation. The UW IdP's attribute release policy sent eduPersonScopedAffiliation to Cdigix for eligibility verification. |