Identity management in a university environment : respecting central and faculty needs and providing the identity to shibboleth
- Rather than introducing a new system for global identity management, the University of Freiburg decided to continue with the existing software systems (esp. from HIS), to identify the leading system for each set of data and to mirror the data between the various systems. A clearly defined workflow ensures that changes to data are made only on the relevant "leading" system and then propagated to the other systems. User authentication for systems managed by the computer center is done via LDAP. Consequently, while access rights are granted by the LDAP system, the decision of whether or not the person is a member of the University is left to the administration. As a consequence the implementation of a portal called mylogin to get the necessary tickets for shibboleth is a straightforward process as it only remains to check the data against LDAP before issueing the corresponding tickets.
Deutsches Urheberrecht