Federated Identity, SSO and Multifactor Authentication June 23 rd , - PowerPoint PPT Presentation

Computing Services and Systems Development Federated Identity, SSO and Multifactor Authentication June 23 rd , 2017

Computing Services and Systems Development F EDERATED I DENTITY , SSO AND MFA @ THE U NIVERSITY OF P ITTSBURGH Tony Carra

Computing Services and Systems Development Pitt Passport • Single Sign-on service • Grants access to Web Based Services such as; – My.Pitt.edu – CourseWeb (Blackboard) – Student Information System – Box – Office 365 – Many Others

Computing Services and Systems Development Features of Pitt Passport • Consistent – Consistent, trusted login experience; passport.pitt.edu • Multifactor Authentication – Enhanced security with added layer • Login History

Computing Services and Systems Development Technology behind Pitt Passport • Shibboleth • Pitt Passport is more than just Shibboleth… – Central Database / Registry – Active Directory – Provisioning System

Computing Services and Systems Development Pitt Passport and IAM system Human Student ID Center UPMC Resources System System Systems System Account Act Mgt Web Central Management Service Directory Web Site System Identity Provisioning System Other University Box Other Cloud Systems Applications Panopto Active Directory Office 365 Active Directory in Pitt Passport Azure

Computing Services and Systems Development Groups • Managed via Web Based Application • Allows flexibility…for Users and Departments – Create Groups – Maintain membership – Can be used through-out many different applications

Computing Services and Systems Development Why Shibboleth? • Reduced number of IDs and passwords for end users • Works with SAML 2.0 • Easy to customize for different configurations • Built for High Ed and Research organizations

Computing Services and Systems Development Multifactor Authentication in Pitt Passport • Provided by Duo Security • Adds a layer of security • Requires 2 “Factors” to verify identity – Something you Know – Something you Have

Computing Services and Systems Development Multifactor Authentication (cont.) • Benefits: – Secure – Efficient – Convenient

Computing Services and Systems Development Joining InCommon Federation • Implementation of Service Providers • Trusted Partners – Level of Trust – Others Universities working with partners • Certificates

Computing Services and Systems Development Thank You Questions?