InCommon Silver Integration

InCommon's assurance program, and in particular InCommon Silver, providing an opportunity for aligning UCTrust Basic assurance with the rest of InCommon. This alignment will have the following benefits:

• Interoperability with other InCommon participants when identity assurance at LoA 2 is required.
• Efficiency and cost saving by having a single assessment process for both UCTrust Basic and InCommon Silver.

The information collected here are internal work products of this project.

Overall Approach

1. In March of 2010, the UCTrust Work Group and the UC IT Policy and Security (UCITPS) proposed that the ITLC defer the UCTrust Basic requirement for periodic audits until an assessment of InCommon Silver could be made to determine its applicability to UCTrust Basic.
2. Based on that assessment, the two groups will draft modifications to http://www.ucop.edu/irc/itlc/uctrust/trustpolicy032707.htmlUCTrust University of California Identity Management Federation Service Description and Policies as part of a proposal to the ITLC for the Integration of InCommon Silver into UCTrust. A draft implementation plan will also be presented as part of the proposal.  This implementation plan will include: deadlines for campus compliance with the modified certification and technical criteria, as well as service provider compliance with any modified technical criteria.

Gap Analysis

• High Level Gap Analysis Input Page
• InCommon Silver Certification Resource Estimates
• InCommon Silver Update for ITLC - September 2011
•  InCommon Silver Update for ITLC - April 2013
• Assumptions and Notes about InCommon Silver Compliance organized by UC Location
• Assumptions and Notes about InCommon Silver Compliance organized by Functional Area of Compliance (4.2.1-4.2.8).  The purpose of these pages is to encourage discussion across UC locations with respect to the implementation plans and analysis in preparation for the September 2011 plan submissions.

• • 4.2.1 Business, Policy, and Operational Factors
  • 4.2.2 Registration and Identity Proofing
  • 4.2.3 Digital Electronic Credential Technology
  • 4.2.4 Credential Issuance and Management
  • 4.2.5 Security and Management of Authentication Events
  • 4.2.6 Identity Information Management
  • 4.2.7 Identity Assertion Content
  • 4.2.8 Technical Environment

Reference Materials

• ITPSUCTrust InCommon Silver final 042111.p