Page History

...

Agenda1.

1. InCommon Silver update

...

1. HR/PPS update

...

1. Update on IAM next generation conversations at UCB/UCSF and higher ed open source IAM joint venture - others who would like to participate and how?

InCommon Silver and ITLC update:

• The update presented to the ITLC can be found here: https://spaces.ais.ucla.edu/display/uctrustwg/Update+For+ITLC+-+September+2011

• This summary page was shared with the ITCL and includes resource estimates. It goes over how we are using the InCommon Silver audit as a replacement for the UC Trust Basic audit that we are all overdue for. Dedra had a conversation with Ann West to re-energize the effort from InCommon to reach out to campuses and federations to see where we are, and how InCommon can help.

• As the page states, the CIC schools are targeting the second quarter of next year for their certification attempt. Also, if you are interested in the InterOp testing program mentioned in the update, go to the InCommon website and subscribe to their mailing list.

• All the resource estimates are shown on the update page as well. Dedra told the ITLC that this is the amount necessary to get the campuses to InCommon Silver, but not to re-credential people. These estimates also do not include the cost of the actual audit; however, since most of the work is on the Identity Management teams, the total audit cost should not be that high.

• As a side note, the UCLA estimate is a total effort and does not include students. They will not be asking for any money because they already have the funding to cover the estimated costs.

• Dedra notes that she will add a column to this table to differentiate between money that will have to be asked for versus existing money.

• LBNL also says that they will not ask for more money, since this is already part of their Identity Management strategic plan.
  UCSC notes that it's not money per se, just asking for existing people's time.

• A cross institutional audit team was suggested to ITLC, to be lead by Karl Heins; ITLC was in agreement of this idea. However, we probably won't put together this team until we have at least a couple campuses that are ready to certify.

• Dedra asks the group if anyone has a timeline of certification. Albert responds that if HR/PPS requires InCommon Silver, then the timeline will be January 2013 for UCLA.

• Dedra brings up the point that for some of those joining the HR/PPS may not even meet the UC Trust Basic standards, so perhaps those campuses should go through the Basic audit at minimum. But in that case, why not just use the InCommon Silver for the audit framework? A response suggest that we do the audit both ways; use Silver, but where it fails, use Basic.

• Dedra mentions that we can ask Karl to point out the differences between the Silver and Basic frameworks so we can know what they are. At the very least, we ast the UC Trust Workgroup can ask HR/PPS to clarify whether or not the system will require InCommon Silver for the HR administrators logging in. Eric points out that in order for us to even ask this question, the numbers have to be there so that we can tell them if the answer is yes, then each campus will have to spend X number of dollars to meet this requirement.

• UC Berkeley has submitted the proposal for the certification costs and it has been granted. They will come up with a project plan within the next month.

• Dedra asks the campuses what their timelines are for being ready with documentation for an audit team to review; the responses are:

• • UCR: one year
  • UCLA: next Fall
  • LBNL: at least one year
  • UCSF: at least one year
  • UCB: within 6-9 months
  • UCD: starting next year

• Dedra says that we can all start documenting our business processes, and for now she will let Karl know that it won't be until next Spring at the earliest when we will have at least two campuses ready for the audit process and for us to get something off the ground. As more campuses start going through the audits, we will gain more knowledge and information on how to go through this process.

HR/PPS update:

• Albert

...

• give an update from Mark, the technical project manager on this effort. The project started in the beginning of

...

• September, and Oracle is holding session to collect information.

...

• ITAG members who participated in the RFC process flew up

...

• to meet with Oracle. Their intention is to collect data interfaces

...

• from each campus

...

• , and interface workbooks have already been given to each campus. There is a meeting

...

• scheduled for next Tuesday to go through

...

• these interfaces.

...

• They will be scheduling day-long meetings with individual campuses to go through

...

• the interfaces.

• At the moment, the first wave for the HR/PPS system will be UCLA, UCM, UCOP, UCSD, and UCSC. The project is treating the medical center as a seperate entity.

d: we have identified an IT lead from each campus?
albert: there is supposed to be
d: public now for waves?
a: UCLA, UCM, UCOP, UCSD, UCSC in first wave. Don't remember the other waves. project is treating medical center as separate entity. meeting next week with all campuses present. ucla session will address identity management concerns (for all campuses will have this). as much as possible we want to do this in a coherent and lockstep manner. we want to do this once. not each campus separately w/ oracle??? not a lot of info on how the interface works or looks like but thats what we will find out in the next months.
IT preparation period in the next few months. interface issues, implementation starting in january 2012. rollout for first wave in january 2013.

...