Internet2 Middleware Initiative

Home News Events Resources About Us Participate Background

The Internet2 Middleware Initiative focuses on developing interoperable identity and access management infrastructures for research and higher education. The initiative's work includes developing tools, roadmaps, software, practices, standards, and education. For more information about Internet2 Middleware Initiative, see the Background page.

IAM Online - Thursday, 9-September-2010,
1:00 pm ET
Federated Identity Management Essentials: Topic TBD. Participation details available on the IAM Online website.

Proceedings now available for:

CAMP: Exploring and Supporting Federated Access, June 2010
Advance CAMP: The Second Identity Services Summit, June 2010

Register Now for the Shibboleth Workshop Series July 28 and 29 in Evanston, Illinois
Have you decided to deploy a web single sign-on (SSO) system and leverage it to access resources and contracted services in the InCommon Federation? Do you need training on installation and support? Consider attending one or both:

Shibboleth Identity Provider Workshop on July 28
Shibboleth Service Provider Workshop on July 29

Identity Management for the LIGO Project, April 28, 2010 (pdf 11 MB)
Scott Koranda, LIGO and University of Wisconsin-Milwaukee

Grouper Groups Management Toolkit v1.6.0 released. (28-June-2010)
more...

Video: Connections: Stories and Dreams of Federated Identity session at EDUCAUSE 2009, 5 Nov 2009, Denver, CO
(Identity and Access Management Sessions at Educause 2009)

Key projects include:

Shibboleth® Federated Single Sign-On Software: open-source web single sign-on and federating software. See an overview of Shibboleth. (pdf)

Grouper™ Groups Management Toolkit: used to manage group memberships across applications and track information such as campus affiliations or roles. See an overview of Grouper. (pdf)

The COmanage Collaborative Organization Management Platform: a platform that eases distributed authentication and access management for a group of collaborative applications. See an overview of COmanage. (pdf)

eduPerson and Related Schema: the Middleware Architecture Committee for Education Directories working group looks at how to describe common identity information for campus and federated relationships. MACE-DIR's many projects include the eduPerson, eduCourse, and eduOrg directory schemas.

MACE-paccman (Privilege and Access Management) Working Group: venue for tackling issues related to providing efficient and effective means for organizations and individuals to control access to computer-based resources, to ensure that resources are used in ways that comply with policy or otherwise meet organizational and individual goals.

MACE (Middleware Architecture Committee for Education) administers a Uniform Resource Name (URN) namespace, supporting the assignment of unique, global, persistent names to resources of various kinds by MACE and its delegates. MACE also administers an Object Identifier (OID) arc for identifying resources of various kinds for Internet2/MACE projects and working groups.

Featured Resources

Tao of Attributes Workshop (Presentations & Webcast archive)
September 2009

Identity Management and Trust Services: Foundations for Cloud Computing
Kevin Morooney (The Pennsylvania State Univ.) and Jack Suess (Univ. of Maryland, Baltimore County)
Educause Review, September/October 2009

PennGroups - Central Authorization at Penn (pdf)
Bill Kasenchar and Chris Hyzer, Univ. of Pennsylvania
Educause MidAtlantic Regional Conference, 7-Jan-2009

Internet Scale Identity, Collaboration and Research & Education,
Ken Klingenstein (Internet2) and RL "Bob" Morgan (Univ. of Washington) [Video]