Rationale/Purpose for InCommon Silver Certification Effort
- InCommon Silver as replacement for UC Trust basic audit
- Upcoming requirement for federated login to NIH Grant Submission, CILogon, National Student Clearinghouse
State of InCommon Silver Assurance in Higher Ed
- CIC schools targeted second quarter of next year for certification attempt
- InCommon managing an InterOp testing program with 3 IdPs (University of Florida, Virginia Tech, and UW-Milaukee) and 1 SP (CILogon) to provide implementation guidelines for campuses attempting certification
UC Resource Estimate Assumptions
- For campuses who submitted hours estimates, the dollar estimates below are based on a rate of $80/hour.
- Includes the cost of bringing existing systems into compliance with InCommon Silver. Assumes that existing account holders will not have to be re-credentialed
- Covers the costs of InCommon Silver compliance for all campus members who might log in to AYSO (with the exception of UCLA, which includes students)
- Estimates do not include the cost of engaging audit staff
Campus |
Resource Estimate |
Notes |
|---|---|---|
LBNL |
$64,000 |
|
UCB |
$166,000 |
|
UCD |
|
Pending |
UCI |
$80,000 |
Plus cost for two-factor |
UCLA |
$359,800 |
Includes students |
UCM |
|
Pending |
UCOP |
$47,000 |
Plus $14,000 annual |
UCSB |
$0 |
New system design includes InCommon Silver, no new resources |
UCSC |
$51,000 - $ 160,000 |
Range from optimistic to pessimistic |
UCSD |
$304,000 - $470,000 |
|
UCSF |
$200,000 |
|
UCR |
$96,000 |
|
Next Steps
- Continue with plan to use InCommon Silver rather than UC Trust audit framework (continue "waiving" UC Trust Basic audit requirement for minimum one more year)
- Await revised certification plan and guidelines due from InCommon in the next couple months
- Review this revised plan at each campus and finalize resource requirements
- ITLC as a group and at each campus will need to make determination on resource assignment and priority
- All campuses should begin the process of documenting current practices using the InCommon Silver framework
- Begin work to establish an audit framework that will make InCommon Silver audits as efficient as possible. The UC Trust workgroup recommended a multi-campus audit team be formed, with representation from internal audit from 3-5 campuses. Karl Heins volunteered to provide leadership and guidance to this group.
Proposed ITLC Action Items
- Review InCommon Silver certification plans with your IAM lead and work with local campus constituents on resourcing the proposed implementation plans.
- Work with UC Trust workgroup leadership to draft request to UC audit services to form a multi-campus review team.