UC Identity Management Work Group

Purpose

UCTrust

• Systemwide meeting on 5/12/2005 to discuss UCTrust
• UCTrust:  Common Identity Attributes (DRAFT - 5/26/2005)
  

Policy Issues

• A Federated Identity Management Criteria [MS Word] questionnaire was distributed to the group on 4/19/2004 to start the process of policy development.
• UCI's Response
  
• UCLA's Response
• UCSD's Response [MS Word]
• Information about UC's employment eligibility verification process, including the U. S. Department of Justice's Form I-9.
• DRAFT (8/10/2004) Responsibilities for Federated Authentication
• DRAFT (12/2/2004) UCTrust Risk Assessment for its use with UCFY/YBO
  

Technology Standards

• Registry for UC system-wide URNs (urn:mace:universityofcalifornia.edu) and OIDs (urn:oid:2:16:840:1:113916)
• The earlier Registry for UC system-wide URNs (urn:mace:universityofcalifornia.edu)
  

Meetings

• Agenda and Meeting Notes
  

Presentations and White Papers

• Identity Management for the University of California (4/1/2004) [MS Word]
• "One pager" describing this project.
• Updated 10/12/2004 for a meeting of the ITTP [MS Word]
  
• Shibboleth [OpenOffice]
• Presentation to the ITLC open source conference at UC Irvine on February 3, 2004.
• Identity Management for the University of California (4/27/2004) [MS PowerPoint, OpenOffice]
  
• Presentation to joint meeting of the UC and CSU CIOs on 4/27/2004.
• Federated Identity Management at the University of California “Halt! Who Goes There?” (5/26/2004) [PDF, OpenOffice]
  
• Presentation to the Council of Vice Chancellors for Administration on 5/27/2004
• Using Shibboleth within a Multi-Campus Institution [PDF, OpenOffice] and Abstract
• Poster presentation to the Shibboleth CAMP, June 28-30, 2004.
• Federated Identity Management for the University of California (8/2/2004) [PDF, OpenOffice]
• Presentation to the UCCSC, August 2, 2004.
• Status of the Federated Authentication Project (9/8/2004) [PDF, OpenOffice]
• Presentation to the ITLC, September 8, 2004
• New Business Models for IT-Based Services [PDF, OpenOffice]
• Presented to UC senior management as part of a conference call discussing the creation of UCTrust, February 9, 2005
  
• Can't We All Just Get Along?  Achieving Federated Identity Management at the University of California [PDF, MS PowerPoint]
• Presentation to Educause Security 2005, April 4, 2005
  

Related Activities and Information

• UC's Common Authentication Project (no longer active, achived to CD)
• Internet2's Shibboleth Project
• Internet2's InCommon
• Internet2's MACE-Dir project
• OMB Memorandum M-04-04, E-Authentication Guidance for Federal Agencies, Dec. 16, 2003.
• Describes four assurance levels for authentication by type of electronic transaction.
  
• NIST Special Publication 800-63, Electronic Authentication Guideline, June 2004.
• Describes technologies and practices which satisfy the requirements of the various assurance levels described in OMB M-04-04.
• Identity and Authentication:  Next Steps, December 17, 2003 [MS Word]
  
• Proposes future plans for the University of California in the area of identity management, following the PKI project.
  

Project Plan

• 4/20/2004 version of the project plan (updated 6/15/2004)
  

Group Membership

Selected Archive of UCFedAuth-L at ucop.edu