Stage 1: Intra-campus Web Single Sign-on - Central Identity Provider
Task |
Limited Scope ....................................... |
Broader Scope .......................................... |
|---|---|---|
Policy Steps |
|
|
1. Define who establishes various policies related to single sign-on (SSO) and authentication |
|
|
2. Have basic identity management policies in place, including data and service stewardship responsibilities and use of the system |
|
|
3. Have policy in place specifying whether NONE/SOME/ALL campus authenticated web sites are REQUIRED to use the central web single sign-on system |
|
|
Business Practice Steps |
|
|
4. Create Help desk support for users encountering problems accessing central web sites protected by SSO |
|
|
5. Reliably issue credentials to on-campus faculty/staff/students |
|
|
6. Create Help desk support for users encountering problems accessing department web sites protected by SSO |
|
|
Technical - Basic Identity and Access ManagementSteps |
|
|
7. Provision/de-provision accounts for and authenticate on-campus faculty, staff, and students |
|
|
8. Provision/de-provision accounts for and authenticate other constituencies (e.g. applicants, alums, affiliates) |
|
|
Technical - Shibboleth software Steps |
|
|
9. Install/operate/manage Shibboleth identity provider software |
|
|