introducing jisc's new managed identity provider service
TRANSCRIPT
Birds of a feather: Introducing LiberateJosh Howlett, Head of trust and identity, Jisc
Simon Cooper, Trust and identity services group manager, Jisc
Goals
»Explain what the service is
»Describe the tariff
»Timelines
»Q&A and discussion
02/05/2023Introducing Liberate
02/05/2023
Background
»Today Jisc offers three access management solutions› UK Access Management
Federation– Web-based content and
services› eduroam (UK)
– Wi-Fi networks› Assent
– Research e-Infrastructure and other non-web services
Introducing Liberate
02/05/2023
Background
»Today, institutions must integrate their systems with these services separately
»This integration can› Require a significant amount of
staff effort› Cost money, if buying a solution› Add to the overall complexity of
delivery
Introducing Liberate
02/05/2023
Liberate: as easy as…
1. Liberate reduces the cost and complexity of adopting and using these services
2. Liberate provides institutions with a single point to
› Integrate these services with their identity management systems
› Configure and manage their use of these services
› Monitor and report on service use
3. Liberate is a cloud-based platform, developed and operated by Jisc
Introducing Liberate
02/05/2023
High level architecture
Introducing Liberate
02/05/2023
Five steps to adopting the service
»Tell us which components you want to subscribe to»Deploy the provided VPN VM image; or your own
OpenVPN endpoint if you prefer (support available)»Connect Liberate to your Active Directory, or other
LDAP directory, using the Service Portal (support available)
»Configure attribute definitions and authorisation policies using the Service Portal (support available)
»Enjoy! If you have any issues, support is available
Introducing Liberate
02/05/2023
Features, advantages, and benefits
Introducing Liberate
Feature Advantage BenefitA competitive tariff Reduce the cost of provision Drive organisational cost
efficienciesSupports AMF, eduroam, and Assent
A single solution for provisioning access to these services
Lowers the barrier to adopting these services
Simple integration with Microsoft Active Directory and other LDAP directories
Allows use of an organisation’s existing identity management system
Avoids duplication of configuration and management effort
An end-to-end solution
No complex integration issues Quick and easy to adopt and start using
Connected to Jisc’s network, Janet, and hosted on AWS
Scalable and secure Peace of mind
Extended office hours’ technical support
Help from the experts when you need it
Ensure a reliable service for your users
Designed and operated by the world-leaders
The service has the capabilities and reliability that you and your users need
Fit for purpose, today and tomorrow
02/05/2023
Tariff information
»https://community.jisc.ac.uk/groups/liberate/article/tariff
Introducing Liberate
02/05/2023
Timeline
Introducing Liberate
1. Today»On-going Pilot with
nine UK Public Libraries active
2. From now until July»Development and testing
continuing»Solicit interest from
institutions in participating in the Pilot and Beta3. From early
July»Launch of Beta
service»UK AMF and Proxy
components only»Available at no
cost
4. Early September»Launch of Production service»Tariff applicable»eduroam and Assent
components available towards end of Q3
02/05/2023
Q&A and discussion
»Is it an attractive offer?»What barriers do you see to adoption?»How can we improve it?› MFA, Kerberos, OIDC, etc.
»Would you like to see a demo?»Any questions, or want to join the Pilot or Beta?› [email protected]
Introducing Liberate
jisc.ac.uk
02/05/2023
Thank you for your attention
Josh Howlett
Head, trust and identity
Introducing Liberate