UC Identity Management Conference Call
- 4/20/2004 - Notes
Participants
- Marina Arseniev, UCI
- Bob Brandriff, UCOP
- Jacqueline Craig, UCOP
- Elazar Harel, UCSD
- Bruce James, UCOP
- Gabe Lawrence, UCSD
- Datta Mahabalagiri, UCLA
- Brian Roode, UCI
- David Walker, UCOP
- Jerry Wilcox, UCOP
- Albert Wu, UCLA
Project Deliverables
InCommon
- David Wasley's note of 4/19/2004 was discussed with respect to
the possibility of joining InCommon sooner than its expected July 1
rollout. We will ask them if we can at least get InCommon
server/sigining certs ahead of that date (June 1?).
Project Schedule
- The draft schedule that David Walker distributed on 4/19/2004 was
discussed. Everyone felt it was a realistic schedule. We
will post it on the web site and distribute it to the ITLC for
discussion on Monday. [Note: After the call, I realized
that there was no "Integration testing" task for the UCFY/YBO portion
of the project. I have added that task; it didn't affect our
overall completion date. - DHW]
- UCSD and UCLA have functioning Shibboleth origins. UCI
expects theirs by May 1.
Other Issues
- We reaffirmed the three attributes that we've agreed to pass to
UCFY/YBO (UCnetID, eduPersonPrinciple, and a transaction ID); it was
agreed that UCFY/YBO would use only UCnetID but log all three. We
will need to create formal definitions of these attributes so that they
can be transported by Shibboleth.
- It was agreed that UCFY/YBO will verify the UCnetIDs it receives
from the campus origins. If the UCnetID is not available, or is
not associated with an employee, then UCFY will present an error
screen. We'll need to agree on the content of that error page for
user documentation.
- To date, only UCSD has mixed both business and personal use of
their SSO. People can view their vacation and sick leave
balances, as well as make travel arrangements (which is business that
is billed personally to the employee).
Future Meetings
- It was agreed that we will schedule regular conference calls
every two weeks for the duration of this project.
- We will probably want a face-to-face meeting around the time that
we are ready to do integration testing. We'll schedule that
meeting as the time approaches.
David
Walker - 4/20/2004