Brazilian NREN - AAI & eduroam

Antnio Carlos Fernandes Nunes

Service Management Director RNP Brazilian NREN

12/04/2013

AGENDA
Federation
What is Federation? Main Concept Federation in Brazil How it works? Governance Status CAFe Evolution eduGAIN A strong alliance Identity Federation in the world Other AAI project in Latin America

eduroam
eduroam Big Bang eduroam development in Brazil Where can we use it? How it works? Requirements Other eduroam project in Latin America

What is Federation?
Union of different communities that trust each other and who share the same rules and because of that have access to specific services.

What is Federation?
Union of different communities that trust each other and who share the same rules and because of that provide access to specific services.

What is Federation?
Union of different communities that trust each other and who share the same rules and because of that provide access to specific services.

What is Federation?
Union of different communities that trust each other and who share the same rules and because of that, provide access to specific services.

MAIN CONCEPT

What is the principal concept that AAI is based on ?

FEDERATION IN BRAZIL

FEDERATION MODELING
WG DIR-EDU (2003 - 2004)

WG -directories (2002 - 2003)

WG Middleware (2004 - 2005)

TF Federation
2007 - 2010 CAFe launch 2010
1

CAFe, how it works?

CAFe Components
Components:
Users; Identity; Identity providers (IdP); Service Providers (SP).

CAFE HOW IT WORKS?

6 5

1 2 4 3

IdPs URL SPs URL WAYFs Idps URL: do URL URL SP Authentication: Welcome to SP Redirection to IdP Redirecting Redirecting to to the WAYF SP Choose your IdP joao Pass: *******

User:

CAFE COMPONENTS

GOVERNANCE

Service Management

AAI Advisor Comitee AAI Technical Comitee

Eduroam Operation and 2 level support team
14

CAFe Operation and 2 level support team

PKI Operation and 2 level support team

CAFe Status

15

CAFE IN 2010 - IDP

6 IdPs: IMPA (A), UFMG (B), UFMS (C), UFPA (D), UFRGS (E), UFSC (F) and UNIVASF (G)
1

CAFE IN 2013 - IDP

41 IdPs! - 650% growth more than 200% every year

1

CAFE IN 2010 - SP

Atlases

CAFE IN 2013 - SP

In production In process

Atlases

CAFE EVOLUTION
2010 First federation in Latin America to join REFEDS 2012 It is the first eduGAIN partnership outside Europe

20

STRONG ALIANCE

21

A short introduction

22

IDENTITY FEDERATION AROUND THE WORLD

23

IDENTITY FEDERATION AROUND THE WORLD

24

HOW EDUGAIN WORKS?

26

MAIN BENEFITS TO USE EDUGAIN

27

HOW TO JOIN EDUGAIN?

Source: <http://www.edugain.org/technical/joining_checklist.php>

28

EDUGAIN MEMBERSHIP STATUS

Source: <http://www.edugain.org/technical/status.php>

29

EDUROAM BIG BANG

31

EDUROAM DEVELOPMENT IN BRAZIL

eduroam Europe (2002 nowadays)

eduroam Latin America (2009 nowadays)

eduroam Brazil (2011nowadays)

2012 - 2014

ELCIRA Project

32 1

WHERE CAN I USE IT (WORLD)?

54 countries > 8.200 access points

Source: <http://monitor.eduroam.org/eduroam_map.php?type=all>
33

WHERE CAN I USE IT (LA)?

Tranquilo, vago! Tenemos el Che, y nosotros? trabajo de !

198 access points in Brazil 6 access points in Chile

Source: <http://monitor.eduroam.org/eduroam_map.php?type=all>

34

WHERE CAN I USE IT?

35

HOW IT WORKS (NATIONAL ROAMING)?

RADIUS Server National PROXY

RADIUS Server

University A

Campus B Campus A
RADIUS Server

LDAP Server

Roaming user (University A)

36

HOW IT WORKS (INTERNATIONAL ROAMING)?

RADIUS Server LATAM PROXY RADIUS Server GLOBAL PROXY

RADIUS Server National PROXY

RADIUS Server

Campus A

Campus B

RADIUS Server

Campus A
LDAP Server

Roaming user
37

REQUIREMENTS
Hardware: Server (processor Intel Core i3, 4GB RAM e HD 500 GB); At least one Access point supporting the protocols IEEE 802.11i e IEEE 802.1X.
Server Softwares: Ubuntu LTS 10.04 (Recomended); FreeRADIUS 2.1.10; OpenLDAP 2.4.23; RadSec 1.3; OpenSSL 0.9.8.

OTHER AAI PROJECT IN LATIN AMERICA

The ELCIRA Project aims to coordinate a series of collaboration tools and services that are being developed in Europe and Latin America in order to provide an interoperability framework that facilitates the work of European-Latin American research teams and to foster collaboration in joint research projects

39

OTHER AAI PROJECT IN LATIN AMERICA

Promoting the deployment of eduroam services

Coordinated Actions for AAI between EU and LA

Creation of a virtual course to train NREN technical teams in order to replicate the action in their NRENs and with their customers;
Action and Policy Coordination with other regional AAI organizations and federations;

Action and Policy Coordination with other regional eduroam organizations;

Deployment of showcase examples with two RedCLARA NRENs or their institutions; Implementation of AAI interoperability and interoperation with Latin American federations and its European counterparts; Implementation of eduroam interoperability and interoperation with Latin American federations and their European counterparts.
40

ELCIRA FUNDED BY

41

ELCIRA INITIALS MEMBERS

42

OTHER EDUROAM PROJECT IN LATIN AMERICA

Creation of a virtual course to train NREN technical teams in order to replicate the action in their NRENs and with their customers;

Action and Policy Coordination with other regional eduroam organisations; Deployment of showcase examples with two RedCLARA NRENs or their institutions. Implementation of eduroam interoperability and interoperation with Latin American federations and their European counterparts.

43

MORE INFORMATIONS
RNP www.rnp.br CAFe www.rnp.br/servicos/cafe eduroam www.eduroam.org eduroam (Brazil) www.rnp.br/servicos/eduroam eduGAIN www.edugain.org REFEDS: www.refeds.org ELCIRA: www.elcira.eu

44

MORE INFORMATIONS ABOUT RNP SERVICES

http://www.rnp.br/servicos/

45

RNP SERVICES NEWS

http://portal.rnp.br/web/servicos/blog http://portal.rnp.br/web/servicos/blog/-/blogs/rss

46

RNP SERVICES TWITTER @servicos_rnp

47

48

Muchas Gracias!

Antnio Carlos Fernandes Nunes

antonio@rnp.br

@servicos_rnp
http://www.rnp.br/servicos