Page History

UCTrust

...

The UCTrust Work Group is comprised of identity management professionals at all of UC's campuses, as well as service providers that utilize UCTrust. This group meets regularly for the following purposes:

• Discussion of technical, policy, and operational issues related to UCTrust. As appropriate, issues and recommendations are forwarded to UC's Information Technology Leadership Council (ITLC), UCTrust's governing board, for resolution and adoption.
• Discussion of technical, policy, and operational issues related to campus identity management systems with the goal of fostering effective identity management practices throughout UC.

ITLC Committee Information - UCTrust Work Group (March/April, 2009)

UCTrust Campus Contacts

Service Provider Guidance and On-Boarding

Current UC Identity Management Progress

Work Plans

• DRAFT UCTrust Work Group Work Plan - 2011
• UCTrust Work Group Work Plan - 2009

Projects

• UCPath Coordination Home (UCTrust Leads Only)
• UCPath (New HR Payroll) IAM Integration
• UC Grid Integration
• UCTrust Revitalization - 2010
• UCTrust Wireless Project
• Library Services Integration
• User Provisioning Project - An UC ITLC Middleware Project
• IAM Component Subgroups
• InCommon Silver Integration
• UCPath IDM Workgroup
• UC IAM User Inventory

Drafts, White Papers, and Other Information about UCTrust

• Invoking UCTrust and InCommon Applications without WAYF Processing
• User Identifiers for UCTrust
• The original, pre-wiki UCTrust Work Group pages
• Past UC projects related to UCTrust
  • UC Identity Management Work Group
  • Enterprise Directory Project
• UCSB IdP Attribute Release

...

the name given to the collective (Identity and Access Management) IAM teams across the UC system. UCTrust was created around 2007 to establish common operating procedures and practices for Identity Management systemwide, to support interoperable practices. Mostly commonly end users see the results of this Workgroup when logging into UC systemwide services using “Single Sign On” with accounts provided by their home campus.

UCTrust Work Group Public Resources

UCTrust Campus Contacts - IAM team leads and contacts for campus-related IAM assistance

UCTrust SSO configuration requests - The onboarding process for multi-campus SAML integrations.

UCIDMGMT-L@listserv.ucop.edu is used for communication within the UCTrust Work Group. An archive of the messages is available to members of the list.

References and Materials

UCTrust SSO and Lived Names - How UCTrust SSO supports the UC GRLN policy

UCTrust Standard Attributes - Attributes your application can request through UCTrust SSO

Information Accessible Only to Work Group Members

Links below this point requires an authorized login to access.

Meetings

UCTrust Work Group conference calls are held on the third Thursday of every month, from 2:00-3:00PM Pacific time.

UCTrust Meeting Minutes

Workgroup Technical Information and Proposals Under Development

Workgroup-Only Content

Help With Accessing Restricted Content in the UCTrust Group Wiki

...

UCTrust Metadata

• Ensuring the Validity and Correctness of UCTrust Security Information
  • Scripts, keyrings, and test cases .tar.gz
  • Current metadata (4/6/2009)
    • UCTrustMetadata.tar.gz
    • UCTrustMetadata.tar.gz.initiator.sig
    • UCTrustMetadata.tar.gz.certifier.sig

Related Resources

• E-Authentication Guidance for Federal Agencies (OMB M-04-04)- Describes a four-level identity assurance framework for federal agencies, as well as a risk-based process for assessing appropriate levels of assurance for electronic transactions requiring authentication.
• Standards for Security Categorization of Federal Information and Information Systems (FIPS PUB 199) - Referenced in OMB M-04-04 for use in determining the potential impact of unauthorized release of sensitive information.
• Electronic Authentication Guideline (NIST 800-63)- Defines the requirements for implementation of the four identity assurance levels defined in OMB M-04-04.
• The InCommon federation
• UCLA Resources
  • Wall of UCLA IT Policies
  • Safe Computing at UCLA
  • UCLA's Shibboleth Support Site - It's undergoing major reworking at the moment...
• Unofficial notes from UCLA of the October 24, 2008 Signet Group Work Group Call - Future of Signet
  • UCLA Use Cases for Signet: DACSS Replacement and Application Data Access Management.
• Releasing and consuming scoped attributes in Shibboleth - UCLA's draft recommendataion

Meetings

• January 17, 2013, 2:00-3:00 conference call [Agenda, Notes]
• July 26, 2012, 3:00-4:00 conference call ?[Agenda, Notes]
• May 24, 2012, 3:00-4:00 conference call ?[Agenda, Notes]
• March 29, 2012 3:00-4:00 conference call [Agenda]
• October 27, 2011 3:00-4:00 conference call [Agenda][DRAFT Notes]
• September 29, 2011 4:00-5:00 conference call [Agenda][Notes]
• August 25, 2011 3:00-4:00 conference call [Agenda][Notes]
• June 23, 2011 3:00-4:00 conference call [Agenda][Notes]
• May 26, 2011 3:00-4:00 conference call [Agenda][Notes]
• April 21, 2011 from ?-? conference call [Agenda][Notes]
• March 24, 2011 from 2-3pm conference call [Agenda][Notes]
• February 17, 2011 from 2-3pm conference call [Agenda][Notes]
• December 8, 2010 from 10am-4pm at UC Berkeley [Agenda][Notes]
• November 15 from 2-3PM conference call [Agenda][Notes]
• October 15 from 2-3PM conference call [Agenda] [Notes]
• September 16 from 2-3PM conference call [Agenda] [Notes]
• August 16 from 1-2PM conference call - CANCELED
• June 21, 2010 conference call [Agenda] [Notes]
• May 10, 2010 conference call [Agenda] [Notes]
• April 8, 2010 conference call [Agenda, Notes]
• April 27, 2009 meeting at UC San Francisco [Agenda, Notes]
• March 5, 2009 conference call [Agenda, Notes]
• February 5, 2009 conference call [Agenda, Notes]
• October 23, 2008 at UC Irvine [Agenda, Notes]
• June 10 and 11, 2008 at UC Davis [Agenda, Notes]
• March 26, 2008 at UC Santa Barbara [Agenda, Notes]
• December 6, 2007 at UC San Diego [Agenda, Notes]
• July 12, 2007 at UC Irvine [Agenda, Notes]
• April 17, 2007 at UC Los Angeles [Agenda, Notes]
• February 12, 2007 at UC Santa Cruz [Agenda, UCLA Identity Management System Updates (PDF, []PowerPoint)]
• October 24, 2006 at UC Riverside [Agenda, Notes]
• August 10, 2006 at UC Berkeley [Agenda, Notes]
• June 8, 2006 at UC Merced [Agenda, Notes]
• March 30, 2006 at UC San Diego [Agenda, Notes]

Future Meetings

• June 28, 2012, 3:00-4:00 PM
• Beginning May 26, 2011, UCTrust Work Group conference calls will be held on the fourth Thursday of every month, 3:00-4:00.
  • Dial-in:  866-740-1260
  • Call ID:  7529390#
  • URL:  http://www.readytalk.com

Electronic Mail List

The UCIDMgmt-L@ucop.edu electronic mail list is used for communication within the UCTrust Work Group. An archive of the messages is available.

Information Accessible Only to the Work Group

Important Instruction About Accessing Restricted Content

You must login if you haven't already before clicking on the link above. Because of a lazy session initialization bug, the following link does not work unless you are already logged in.

• Which Login ID Should I use?
• I manage my campus's Shibboleth Identity Provider. What information should I release to this wiki?

...