Authentication into Network Zone environment - Implementation

Legend: not started IN PROGRESS STALLED decided

Recommendation

Use UCOP ITS “Shib proxy” (connects all UC shib directories into one interface) for NZ authentication.

Background

Authentication for accounts to NZ could use either Shibboleth or Ex Libris Identity Service authentication method. Since CDL’s main office is split between those with Shibboleth accounts at UCOP and Shibboleth accounts at UCSD, authentication into the NZ needs to support both types of users. Shibboleth login is more secure and would support SSO for staff logging into the NZ. The UCOP ITS’s Shibboleth proxy service would enable a single integration point with Alma for all UC Shibboleth sites, negating the need for campus Shibboleth services to integrate with both their campus IZ and the NZ.

Dependencies

Questions to consider

Assumptions

Scenarios

Action Log