Management Phase 2: Shibboleth as Attribute Delivery for Authorization

Published:
Presentations and Seminars
Author(s) and Contributors:
Speaker(s): Renee Shuey Gabriel Lawrence
Source(s) and Collection(s):
Presentation(s): EDUCAUSE Grant Programs (CAMP)

Abstract

Often, the next step is to enable passing of attribute information about a user to an application for use in making local authorization decisions. While conceptually similar to having the application retrieve this information from an enterprise directory, using Shibboleth provides management advantages. This session will explore the changes to policy and business process related to providing this attribute data, strategies for working with the data stewards, the policies governing the release of this information, and the management of this information by applications.

Download Resources