Security Components

Table of Contents

  1. Security Components
    1. Community Single Sign-On (CSSO)
    2. Shibboleth
    3. OpenSSO

Platform Introduction

  1. Community Websites
  1. Common Data Model
  1. Platform Design Draft
  1. Platform Use Cases

Major Platform Components

  1. CDM Dataportal
  1. CDM Java Library
  1. CDM Community Server
  1. CDM REST Services 2.0
  1. Taxonomic Editor
  1. Geographic Components
  1. Map REST Service
  1. Literature Components
  1. Security Components
  1. Experts Database
  1. BDTracker

Developer Help

  1. Best Practices
  1. Developer Tools
  1. Developer Applications
  1. Developer Resources
  1. CDM Library Developers Guide

Workflow models

  1. ATBI Model
  1. Revisionary Models

Community Single Sign-On (CSSO)

The Community Single Sign-On (CSSO) security infrastructure aims to integrate the security domains of various EDIT service providers into the platform. The aim of this infrastructure is to recognise the requirements of many service providers to remain the sovereigns of their resources and services offered, while enabling individual members of the EDIT community to access all these services with a single identity. Thus, community members will have to be registered only once and will have to remember one login/password combination only when accessing any services offered through the platform. Simultaneously, service providers may define and enforce individual access control policies in order to protect their resources. Potentially, the CSSO infrastructure will integrate with other biodiversity informatics networks as well.

For more detailed information, please visit

Community Single Sign-On (CSSO) security infrastructure
Provides a general overview of the CSSO infrastructure

Shibboleth

During the planning stage of the CSSO security infrastructure, Shibboleth was identified as an appropriate open source security framework and decided for implementation on the EDIT platform. Shibboleth is standards-based, open source middleware software which provides Web Single SignOn? (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner and implements the OASIS SAML v1.1 specification, providing a federated Single-SignOn? and attribute exchange framework.

For more detailed information, please visit

Shibboleth
Provides a general overview of the Shibboleth framework, installation guides, software and documentation.

OpenSSO

OpenSSO has been evaluated as an suitable federation management tool for EDIT. It represents the EDIT federation Identity Provider now. I builds up on SAML v2.0 and is compatible with Shibboleth.

For more detailed information, please visit

OpenSSO
Provides installation guides, and user documentation.