CSSO » History » Version 78
Lutz Suhrbier, 08/26/2010 07:40 PM
1 | 1 | Lutz Suhrbier | |
---|---|---|---|
2 | 69 | Lutz Suhrbier | |
3 | |||
4 | 72 | Lutz Suhrbier | # Community Single Sign-On (CSSO) |
5 | 1 | Lutz Suhrbier | |
6 | 69 | Lutz Suhrbier | {{>toc}} |
7 | |||
8 | |||
9 | 2 | Lutz Suhrbier | |
10 | 71 | Lutz Suhrbier | ---- |
11 | |||
12 | 46 | Lutz Suhrbier | The aim of EDIT's Community Single Sign-On (CSSO) security infrastructure is integrating various EDIT service providers into the platform such as registered users of the EDIT community may access these services using a single EDIT identity only. Simultaneously, the CSSO security infrastructure respects the requirements of many biodiverity service providers to remain the sovereigns of their resources and services offered. That means, service providers may define and enforce individual access control policies in order to protect their resources, i.e. enable or prevent certain users or groups from accessing specific services. |
13 | 1 | Lutz Suhrbier | |
14 | 3 | Lutz Suhrbier | |
15 | 66 | Lutz Suhrbier | Technologically, EDIT's [[CSSO|CSSO Security Infrastructure]] bases on the [OASIS Security Assertion Markup Language (SAML)":http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security standard family. The main benefits of SAML include a secure attribute exchange framework, several open source implementations, privacy-preserving access to individually protected online resources and a federation concept. In particular, this federation concept perfectly matches the requirements regarding the creation of a single sign-on platform for more or less closed communities like e.g. taxonomic experts within EDIT. Beside others, the EDIT federation currently consists of about 2000 taxonomic experts registered in an SAML Identity Provider (IdP) and several SAML Service Providers (SP) instances like e.g. "EDITExpertNet](http:///www.editexpertnet.org.) |
16 | 1 | Lutz Suhrbier | |
17 | |||
18 | 67 | Lutz Suhrbier | While, the vision is to extend the CSSO concept from EDIT to the whole biodiversity community someday, this document will present an outline to any available information regarding the existing CSSO release. |
19 | 6 | Lutz Suhrbier | |
20 | 46 | Lutz Suhrbier | |
21 | 53 | Lutz Suhrbier | ---- |
22 | |||
23 | 50 | Lutz Suhrbier | |
24 | 1 | Lutz Suhrbier | |
25 | 55 | Lutz Suhrbier | ## EDIT Federation |
26 | |||
27 | _[[EDITFederation|General Information]]_:: |
||
28 | |||
29 | 56 | Lutz Suhrbier | Provides general information about the EDIT Federation. |
30 | 2 | Lutz Suhrbier | |
31 | 58 | Lutz Suhrbier | _[[EDITFederation#HowtobecomeanEDITuser|How to become an EDIT user ?]]_:: |
32 | 52 | Lutz Suhrbier | |
33 | 54 | Lutz Suhrbier | Provides a detailed description on how users can be registered to the EDIT federation. |
34 | 1 | Lutz Suhrbier | |
35 | 58 | Lutz Suhrbier | _[[EDITFederation#HowtobecomeanEDITServiceProvider|How to become an EDIT Service Provider ?]]_:: |
36 | 1 | Lutz Suhrbier | |
37 | 54 | Lutz Suhrbier | Provides a detailed description on how EDIT institutions can implement services using the Single Sign-On features within the EDIT federation. |
38 | |||
39 | 60 | Lutz Suhrbier | _[[EDITFederationMembers|Current EDIT Federatoin members]]_:: |
40 | 54 | Lutz Suhrbier | |
41 | Gives an overview of the EDIT services currently connected to CSSO. |
||
42 | |||
43 | 68 | Lutz Suhrbier | _[[EDITFederationAttributes|Common Set of EDIT Federation Attributes]]_:: |
44 | 54 | Lutz Suhrbier | |
45 | 1 | Lutz Suhrbier | Describes the user attributes currently transmitted to EDIT Service Providers from the EDIT Identity Provider. |
46 | |||
47 | |||
48 | ---- |
||
49 | 62 | Lutz Suhrbier | |
50 | |||
51 | |||
52 | 72 | Lutz Suhrbier | ## CSSO Security Infrastructure |
53 | 56 | Lutz Suhrbier | |
54 | 63 | Lutz Suhrbier | _[[CSSOTechnicalOverview|CSSO Technical Overview ]]_:: |
55 | 56 | Lutz Suhrbier | |
56 | 1 | Lutz Suhrbier | Provides general information about the EDIT security components like [[CSSOTechnicalOverview#IdentityProviderIdP|Identity Provider (IdP)]], [[CSSOTechnicalOverview#ServiceProviderSP|Service Provider (SP)]], [[CSSOTechnicalOverview#DiscoveryServiceDS|Discovery Service (DS)]] and [[CSSOTechnicalOverview#PublicKeyInfrastructurePKI|Public Key Infrastructure (PKI)]]. |
57 | 73 | Lutz Suhrbier | |
58 | 1 | Lutz Suhrbier | |
59 | 73 | Lutz Suhrbier | |
60 | 74 | Lutz Suhrbier | ### Certification Authorities |
61 | 53 | Lutz Suhrbier | |
62 | 74 | Lutz Suhrbier | _[[FUBCertificationAuthority|Freie Universität Berlin (FUB-CA) Certification Authority ]]_:: |
63 | 1 | Lutz Suhrbier | |
64 | 74 | Lutz Suhrbier | Documentation of any X.509 certificates used within the CSSO Infrastructure. |
65 | 1 | Lutz Suhrbier | |
66 | 74 | Lutz Suhrbier | _[[WP57CertificationAuthority|WP 5.7 Certification Authorities ]]_:: |
67 | 1 | Lutz Suhrbier | |
68 | 74 | Lutz Suhrbier | Documentation of the EDIT Demo CA. |
69 | 1 | Lutz Suhrbier | |
70 | 53 | Lutz Suhrbier | |
71 | 74 | Lutz Suhrbier | |
72 | 75 | Lutz Suhrbier | ---- |
73 | |||
74 | |||
75 | |||
76 | 76 | Lutz Suhrbier | ## User Guides |
77 | 1 | Lutz Suhrbier | |
78 | 76 | Lutz Suhrbier | _[[OpenSSOUser|OpenSSO User Documentation ]]_:: |
79 | 1 | Lutz Suhrbier | |
80 | 76 | Lutz Suhrbier | Documentation of the basic [[OpenSSO]] user interface for EDIT users. |
81 | 74 | Lutz Suhrbier | |
82 | 76 | Lutz Suhrbier | _[[InvalidSecurityCertificate|The "Invalid Security Certificate Problem"]]_:: |
83 | 1 | Lutz Suhrbier | |
84 | 77 | Lutz Suhrbier | Explains how users have to deal with this error message when connecting to EDIT CSSO services. |
85 | 1 | Lutz Suhrbier | |
86 | |||
87 | 52 | Lutz Suhrbier | ---- |
88 | |||
89 | 1 | Lutz Suhrbier | |
90 | |||
91 | 76 | Lutz Suhrbier | ## **Anything below is currently work in progress. Sorry** |
92 | 1 | Lutz Suhrbier | |
93 | 76 | Lutz Suhrbier | |
94 | 53 | Lutz Suhrbier | |
95 | 76 | Lutz Suhrbier | ### Service Provider (SP) |
96 | 53 | Lutz Suhrbier | |
97 | 76 | Lutz Suhrbier | _[[Shibboleth|Shibboleth General Information]]_:: |
98 | 53 | Lutz Suhrbier | |
99 | 76 | Lutz Suhrbier | _[[ShibbolethProtocol|The Shibboleth Protocol]]_:: |
100 | 48 | Lutz Suhrbier | |
101 | 53 | Lutz Suhrbier | |
102 | 50 | Lutz Suhrbier | |
103 | 76 | Lutz Suhrbier | ### Shibboleth Proxy |
104 | 1 | Lutz Suhrbier | |
105 | 76 | Lutz Suhrbier | _[[ShibbolethProxy|Shibboleth Proxy General Information]]_:: |
106 | 1 | Lutz Suhrbier | |
107 | 48 | Lutz Suhrbier | |
108 | 53 | Lutz Suhrbier | ---- |
109 | 1 | Lutz Suhrbier | |
110 | 50 | Lutz Suhrbier | |
111 | 48 | Lutz Suhrbier | ## Installation Guides |
112 | 50 | Lutz Suhrbier | |
113 | 1 | Lutz Suhrbier | |
114 | 53 | Lutz Suhrbier | ### [[OpenSSO]] |
115 | 48 | Lutz Suhrbier | |
116 | 53 | Lutz Suhrbier | _[[OpenAMIdPInstallDebianLenny|OpenAM (OpenSSO) based Identity Provider (IdP) Installation on Debian Lenny ]]_:: |
117 | 1 | Lutz Suhrbier | |
118 | 53 | Lutz Suhrbier | _[[OpenSSOFederationSetup|OpenSSO Federation Setup ]]_:: |
119 | 1 | Lutz Suhrbier | |
120 | 53 | Lutz Suhrbier | _[[OpenSSOInstallDebianEtch|OpenSSO Installation (with Debian Etch) ]]_:: |
121 | 50 | Lutz Suhrbier | |
122 | 1 | Lutz Suhrbier | |
123 | |||
124 | 48 | Lutz Suhrbier | ### [[Shibboleth|Shibboleth ]] |
125 | 1 | Lutz Suhrbier | |
126 | 53 | Lutz Suhrbier | _[[ShibbolethSP2InstallDebianLenny|Shibboleth Service Provider (SP) v2.3.x Installation on Debian Lenny ]]_:: |
127 | 1 | Lutz Suhrbier | |
128 | |||
129 | 53 | Lutz Suhrbier | _[[ShibbolethIdPInstallDebianEtch|Shibboleth Identity Provider (IdP) Setup on Debian Etch ]]_:: |
130 | 48 | Lutz Suhrbier | |
131 | 53 | Lutz Suhrbier | _[[ShibbolethSP2InstallDebianEtch|Shibboleth Service Provider (SP) v2.x Installation on Debian Etch ]]_:: |
132 | 48 | Lutz Suhrbier | |
133 | 53 | Lutz Suhrbier | _[[ShibbolethSPInstallDebianEtch|Shibboleth Service Provider (SP) Installation on Debian Etch ]]_:: |
134 | 48 | Lutz Suhrbier | |
135 | 53 | Lutz Suhrbier | _[[ShibbolethSPInstallWindows|Shibboleth Service Provider (SP) Installation on Microsoft Windows ]]_:: |
136 | 1 | Lutz Suhrbier | |
137 | |||
138 | |||
139 | 53 | Lutz Suhrbier | ### [[SimpleSAMLphp|SimpleSAMLphp ]] |
140 | 48 | Lutz Suhrbier | |
141 | 53 | Lutz Suhrbier | _[[SimpleSAMLphpInstall|SimpleSAMLphp Installation (Debian Etch) ]]_:: |
142 | 48 | Lutz Suhrbier | |
143 | 1 | Lutz Suhrbier | |
144 | 48 | Lutz Suhrbier | |
145 | 53 | Lutz Suhrbier | ### [[SpringSSO]] |
146 | 1 | Lutz Suhrbier | |
147 | 53 | Lutz Suhrbier | _[[SpringSSO|Integrating Spring Framework into CSSO ]]_:: |
148 | 48 | Lutz Suhrbier | |
149 | 1 | Lutz Suhrbier | |
150 | |||
151 | 48 | Lutz Suhrbier | |
152 | 53 | Lutz Suhrbier | ### Xen |
153 | 1 | Lutz Suhrbier | |
154 | 53 | Lutz Suhrbier | _[[Xen_installation|BGBM Xen server documentation ]]_:: |
155 | 50 | Lutz Suhrbier | |
156 | 48 | Lutz Suhrbier | |
157 | 1 | Lutz Suhrbier | |
158 | 53 | Lutz Suhrbier | ### Debian Linux |
159 | 50 | Lutz Suhrbier | |
160 | 53 | Lutz Suhrbier | _[[Debian|Debian Linux Installation Guide ]]_:: |
161 | 1 | Lutz Suhrbier | |
162 | |||
163 | 50 | Lutz Suhrbier | |
164 | 53 | Lutz Suhrbier | ### Apache |
165 | 1 | Lutz Suhrbier | |
166 | 53 | Lutz Suhrbier | _[[Apache2InstallDebianEtch|Apache2 Installation on Debian Etch]]_:: |
167 | 1 | Lutz Suhrbier | |
168 | 53 | Lutz Suhrbier | _[[ApacheMySQLAuthentication|Apache MySQL Authentication for Debian Etch]]_:: |
169 | 48 | Lutz Suhrbier | |
170 | |||
171 | 1 | Lutz Suhrbier | |
172 | |||
173 | 48 | Lutz Suhrbier | ### [[Drupal|Drupal ]] |
174 | 1 | Lutz Suhrbier | |
175 | 53 | Lutz Suhrbier | _[[Drupal5InstallDebianEtch|Drupal5 Installation on Debian Etch]]_:: |
176 | 1 | Lutz Suhrbier | |
177 | 53 | Lutz Suhrbier | _[[Drupal5Mirroring|Drupal]]_:: |
178 | 1 | Lutz Suhrbier | |
179 | |||
180 | |||
181 | 53 | Lutz Suhrbier | ### Java |
182 | 50 | Lutz Suhrbier | |
183 | 53 | Lutz Suhrbier | _[[JDK5InstallDebianEtch|SUN JDK5 Installation on Debian Etch]]_:: |
184 | 48 | Lutz Suhrbier | |
185 | 50 | Lutz Suhrbier | |
186 | 48 | Lutz Suhrbier | |
187 | 53 | Lutz Suhrbier | ### Maven2 |
188 | 50 | Lutz Suhrbier | |
189 | 53 | Lutz Suhrbier | _[[Maven2InstallDebianEtch|Apache Maven 2 Installation on Debian Etch]]_:: |
190 | 1 | Lutz Suhrbier | |
191 | |||
192 | 50 | Lutz Suhrbier | |
193 | 1 | Lutz Suhrbier | ### [[MySQL|MySQL ]] |
194 | |||
195 | 53 | Lutz Suhrbier | _[[MySQLInstallDebianEtch|MySQL Installation on Debian Etch]]_:: |
196 | 50 | Lutz Suhrbier | |
197 | 48 | Lutz Suhrbier | |
198 | |||
199 | 53 | Lutz Suhrbier | ### Postfix |
200 | 50 | Lutz Suhrbier | |
201 | 53 | Lutz Suhrbier | _[[PostfixInstallDebianEtch|Postfix Installation (Debian Etch)]]_:: |
202 | 48 | Lutz Suhrbier | |
203 | 50 | Lutz Suhrbier | |
204 | 48 | Lutz Suhrbier | |
205 | ### [[PostgreSQL|PostgreSQL ]] |
||
206 | |||
207 | 53 | Lutz Suhrbier | _[[PostgreSQLInstallDebianEtch|PostgreSQL Installation on Debian Etch]]_:: |
208 | 48 | Lutz Suhrbier | |
209 | |||
210 | |||
211 | 50 | Lutz Suhrbier | ### [[SQLite|SQLite ]] |
212 | 48 | Lutz Suhrbier | |
213 | 53 | Lutz Suhrbier | _[[SQLiteInstallDebianEtch|SQLite Installation on Debian Etch]]_:: |
214 | 50 | Lutz Suhrbier | |
215 | 48 | Lutz Suhrbier | |
216 | |||
217 | ### [[Subversion|Subversion ]] |
||
218 | 50 | Lutz Suhrbier | |
219 | 53 | Lutz Suhrbier | _[[SVNInstallDebianEtch|Subversion Installation on Debian Etch]]_:: |
220 | 48 | Lutz Suhrbier | |
221 | 53 | Lutz Suhrbier | _[[SVNMirroring|Mirroring Subversion Repositories]]_:: |
222 | 48 | Lutz Suhrbier | |
223 | |||
224 | |||
225 | 53 | Lutz Suhrbier | ### Tomcat6 |
226 | 48 | Lutz Suhrbier | |
227 | 53 | Lutz Suhrbier | _[[Tomcat6InstallDebianEtch|Tomcat6 Installation on Debian Etch]]_:: |
228 | 50 | Lutz Suhrbier | |
229 | 1 | Lutz Suhrbier | |
230 | 49 | Lutz Suhrbier | |
231 | 50 | Lutz Suhrbier | ### [[Trac|Trac ]] |
232 | 48 | Lutz Suhrbier | |
233 | 53 | Lutz Suhrbier | _[[TracInstallDebianEtch|Trac Installation on Debian Etch]]_:: |
234 | 48 | Lutz Suhrbier | |
235 | 53 | Lutz Suhrbier | _[[TracMirroring|Mirroring Trac]]_:: |
236 | 48 | Lutz Suhrbier | |
237 | |||
238 | 53 | Lutz Suhrbier | ---- |
239 | |||
240 | |||
241 | ## Miscellaneous |
||
242 | |||
243 | _[[CSSOSoftwareLicense|Licenses used by CSSO 3rd party components ]]_:: |
||
244 | |||
245 | _[[CSSOPlannings|Initial Plannings of the Community Single Sign-On (CSSO) Security Infrastructure ]]_:: |