collaboration is happening

Collaboration is Happening

Harold Teunissen et al.April 2012 - #I2SMM12

Updates from the Netherlands and Beyond...

Collaboration is Happening: Updates from the Field and Beyond - I2SMM12 - Arlington, VA

Cyberinfra in the Netherlands

2

• All ICT activities for Higher Education and Research in the Netherlands are brought under one umbrella

Shared Professional and Educational Services

Scientific Computing & Storage

Commercial ICT Products & Services

National Research & Education Network


About SURFnet

• Development and exploitation of - the Dutch National Network for Higher Education and Research - innovative ICT platforms & services

• By and for the Dutch Higher Education and Research community- 160+ connected organizations, 1 million users- Combines the demand of connected institutions- 100% ownership SURF- Not for profit, 85 employees- Over 14,000 km dark fiber

3


Changing Behaviors

4

HierarchicalSecrecy

Loose AllianceSluggishNovelty

Tunnel VisionInstitution

Single Discipline

Self OrganizingTransparencyCollaboration

UrgencyInnovationDidactic

IndividualMulti-Disciplinary Source: Sir Ken Robison


Motive

• Cloud cloud cloud — data explosion• Sharing sharing sharing — connectivity explosion• Go go go — study + work + play + collaborate + organize

+ share + et cetera

• Collaboration is key to you and your team’s success!

5

Source: AMD


New core business

• Modern universities are developing towards loose conglomerates of (inter)discipline expertise

• Collaboration is therefore a core business• Scientific collaboration involves groups of people in

multiple institutions, disciplines and countries• Collaboration is about using shared services and

resources

• Virtual Organization = People + Groups + Resources + Multi-Discipline + Services + Policies + Funding + ...

6

*a.k.a. Virtual Collaboration


Collaborations and Partnerships

7

• Virtual Research Team- Focused on doing research- Small scale - Temporary and elastic- Little ICT awareness- Users

• “Virtual” Infrastructure Provider- Focussed on providing infrastructure for specific discipline- Well-organized with grands and budgets- Longer term- Better ICT awareness- Not virtual (ESFRI projects, CLARIN, Lifewatch, LOFAR, NBIC)

Virtual Laboratory

Virtual Project

Virtual Colla-boration

Virtual Breeding Environment

Collaboration is Happening: Updates from the Field and Beyond - I2SMM12 - Arlington, VA 8

Enabled by

Multi-Disciplinary Collaboration

ƒ


OpenConext

• Provides the glue and lubrication middleware to make campus, cloud based services and resources usable for collaboration for both inter campus and virtual collaboration scenarios

• OpenConext o!ers the Identity and Group Infrastructure

• O!er the platform software for large, virtual collaboration-type collaboration to run-you-own

• OpenConext allows you to create your own collaboration environment that organizes your (online) applications, services and resources

9


Core Components

• Federated Identity Management — SAML• Groups Management — Grouper• Social Network 'Portal' technology — OpenSocial• Collaboration Services and Resources

- Document Sharing- Video Collaboration- Learning Systems- Data Storage- Data Mining- Workspaces- Workflows- Et cetera

9000CALORIES

100% SATISFACTION

Virtual Organization


Architecture


Simplified view

12

SAML2 Federation

SAML2 Identity ProviderADFS TBD

OpenConextEngine

JANUS

OpenSocialContainer

Web Portal

Service Registry

Policy Management

Attribute Management

Group Management

OpenSocialRest

XACML

TBDGadget

Grouper

OpenSocial RestOAuth

SAML2 SP SAML2 Metadata

Online Service

* Developed by SURFnet

XACML


Getting Organized

13

InfrastructureDevelopment of OpenConext and exploitation

of SURFconext federated identity and groups management middleware

AdoptionPilots to support the adoption of new services

provided through SURFconext

Vendor Management

Online/cloud/collaboration services supply chain

InfrastructureDevelopment of OpenConext and

exploitation of SURFconext federated identity and groups management

middleware

AdoptionPilots to support the adoption of new

services provided through SURFconext

Vendor Management

Online/cloud/collaboration services supply chain


It is about getting the product...

14

Source: Alaine Delorme


...to market

15

Source: Reuters

• Creating an eco-system of online services• With the same conditions for whole community• Both serving the short and long tail in service demand

- Collaboration services (e.g. Google Apps, O"ce365)- Audio & video (conferencing) services (e.g. Cisco WebEx) - Infrastructure as a Service (e.g. Amazon AWS, greenqloud) - Niche services for specific research and education domains


Vendor Management

16


Lifecycle

17

Phase 1: Prioritization

Phase 2:Selection

Phase 3:Fitting

Phase 4:Realization

Phase 5:Exploitation

Service Management

License Agreements, Policy Framework, Shared

Values and Mutual Expectations set

Results: Signed Contracts

Wish Lists, Demand Assessment, and Market &

Domain StudiesResults: Shortlist per domain

Contact with Supplier Feasibility Study: Strategic,

Technical, Organization, LegalResult: Go — No Go

Launch Event, Periodic evaluation of shared values, policies, etc.,

strengthen relationshipResults: New Opportunities

Formal connection to infrastructure (network,

SURFconext, etc.)Result: Service available for

Users

Mockup Inspiration: pnikolov.deviantart.com

MarketplaceOne Stop Shop for Online Services (SaaS, PaaS, and IaaS) for Higher Education and Research in the Netherlands

#0.15/GB#3.50/50GB/seat

#0 #0.12/VM/hr

greenqloud

Box

Google for EducationOur public compute cloud automates many of the tedious and di!cult to manage tasks of system administrators and is a complete self-service ...

Google Apps for Education is a free suite of hosted email and collaboration applications exclusively for schools and universities....

Harold Teunissen

Search 6 items

©2012 SURF and/or its a"liates. All rights reserved.

Collaboration Infrastructuremore info... more info...

looking for...VO Administrator

Service Portal

Collaboration tools adopted by over 100000 companies globally. Box simplifies online file storage, replaces FTP and connects....

Amazon AWSAmazon o"ers a cloud computing solution on a pay per use basis. If you need to run an extensive job, they o"er various tiers of...

Explore how O!ce 365 brings together online o!ce collaboration for email, document sharing, web

conferencing and more.


Service Brokering — Vision

18


Service Pipeline 2012 YTD

19


Challenges

20

• How to deal with di!erent types of Service Providers, Users and Business Models (at least 12 variants)- Policies and license agreements, technical requirements, etc.- Opt-in vs Opt-Out, International and multi-domain aspects- Provisioning and deprovisioning

Business Service Provider Users

Profit3rd Party

One Distribution Channel

Non-Profit3rd Party

One or more institutions with bi-lateral contracts

ProfitInstitution

Limited to constituency

Non-ProfitInstitution

Open to all

ProfitVirtual Organization

Limited to constituency

Non-ProfitVirtual Organization

Open to all

Stakeholder Matrix

• Open Exchanges is a stepping stone for open collaborations (e.g. technical or organizational) where trust plays important part

• Anyone may become a member of an Open Exchange• Links may be connected to the Open Exchange• All members are allowed to exchange any kind of tra"c• There’s no policy inside the Open Exchange

preventing any destinationor kind of data

• “Policy is open”


Open Exchanges

21

Open Exchange

member

member

member member

member

member


Instances

• An Open Internet Exchange (e.g. AMS-IX and NYIIX) plays a supporting role by o!ering a shared and open infrastructure where multiple networks can meet at a central location in order to exchange IP tra"c

• Other variants Open Lightpath Exchanges (e.g. MAN LAN and Netherlight), and Open Mobile Exchange

• An Open Collaboration Exchange (OCX) is an exchange point (a service) where (inter)national IdPs and SPs can be interconnected at the lowest “cost”

• Next to the technical infrastructure the exchange may require a policy and is also likely to include a governance body...

22


OCX — Rationale

• Facilitate international collaborations and virtual organizations

• Make it easier for global interconnection of IdPs and SPs• Harmonizing attribute exchange that will result in more

SPs that potentially become (technically) available to more individual (sets of) IdPs

• Ideally, for any participating country, SPs and IdPs will have to ‘openconext’ only once to become part of the exchange

• Add-on to eduGAIN

23


Current Situation

24

IdP

IdP

IdPIdP

SP

SPSP

SP

SURFconext

Service Provider

from the USA

Identity Provider

in the Netherlands

Access Federation

in the Netherlands


Current Situation

24

IdP

IdP

IdPIdP

SP

SPSP

SPSP

SP

SPeduGAINPolicy &

Metadata Exchange

IdP IdP

eduGAIN

IdP

SP

SP

SURFconext

UK ACFED


OCX Concept

25

OCXPolicy & Metadata

& Technical Exchange

openconext.org

IdP

IdP SP

IdP

IdP SPIdP

SP

IdP

SP

IdP

SP

SP

SP


OCX Concept

26

openconext.org

IdP

IdP SP

IdP

IdP SPIdP

SP

IdP

SP

IdP

SP

SP

SP


Scenarios — Distributed Exchange

27

edu.openconext.org

uk.openconext.org

fr.openconext.org

IdP

IdPIdP

no.openconext.org

jp.openconext.org

nl.openconext.org

exchange.openconext.org

SP SP

SPSP SP

SP

ca.openconext.org

jp.openconext.orgcom.openconext.org

nl.openconext.org

uk.openconext.org


Scenarios — Multiple Exchanges (1)

28

IdP

jp.openconext.orgIdP

SP SP

SPSP

SP

ca.openconext.org

IdP

nl.openconext.org

fr.openconext.org

uk.openconext.org

SP

edu.openconext.org

IdP

ca.openconext.org

jp.openconext.orgcom.openconext.org

nl.openconext.org

uk.openconext.org



28

IdP

jp.openconext.orgIdP

OpenConextExchange API

SP SP

SPSP

SP

ca.openconext.org

IdP

nl.openconext.org

fr.openconext.org

uk.openconext.org

SP

edu.openconext.org

IdP



29

OpenConextExchange API

SP

bamboo.openconext.org

IdP

clarin.openconext.org

fr.openconext.org

jp.openconext.org

SPSP

uk.openconext.org

edu.openconext.org

SP


Challenges

• Again, it is all about trust and its balance with usability• For individual SP-IdP cases the eduGAIN policies might require

strengthening with bi-laterals which might lead to policy creep• Stepping stone for SPs, but how to get the international VOs

involved• Hierarchy of trust and policies• Next steps — we would like to invite NRENs to work out both

OCX scenarios- Organizational- Technical- Legal / policy wise

30

[email protected] haroldteunissen

mailto:[email protected]




collaboration is happening

Technology

i2smm12 arlington

countries collaboration

et cetera collaboration

virtual esfri projects

surfconext federated

ict activities

adoption of new pilots

dutch higher education