Changes between Initial Version and Version 1 of AtomicLearning


Ignore:
Timestamp:
06/06/13 16:22:53 (11 years ago)
Author:
dabantz@…
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • AtomicLearning

    v1 v1  
     1=== [[https://iam.alaska.edu/|IAM]] / [[https://iam.alaska.edu/projects|Projects]] / [[https://iam.alaska.edu/shib|Shibboleth]] / [[ServiceCandidates|Service Candidates]] / Atomic Learning === 
     2 
     3After a period of CAS authentication (using CASShib), Atomic Learning added support for SAML / Shibboleth.  Licensing is campus-based, originally only a couple of UAF campuses; as of June 2013, all UAA and UAF campuses are licensed; students and employees at any of these campuses are authorized to use Atomic Learning.  The SAML assertion to Atomic Learning includes campus affiliation(s) of the authenticated user - see the qualification below. 
     4 
     5Other attributes released are EPPN, BannerID, email, surname, givenName, and a scoped version of eduPersonAffiliation (like !student@alaska.edu or !faculty@alaska.edu). 
     6 
     7Atomic Learning only consumes the "first" attribute value in the multi-valued attribute containing campus affiliation(s).  To prevent inappropriate denial of access for those with multiple campus affiliations including non-licensed campuses, UA added a release policy that filters and only releases the values of campus names explicitly licensed: 
     8 
     9{{{ 
     10<!-- Specifically release only values of licensed campuses --> 
     11<!-- AL may deny access if non-licensed campus affiliation asserted --> 
     12  <AttributeRule attributeID="AtomicLearningCampus"> 
     13      <PermitValueRule xsi:type="basic:OR"> 
     14            <basic:Rule xsi:type="basic:AttributeValueString" value="UA Statewide Admin" /> 
     15            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA Kenai Peninsula College" /> 
     16            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA Kodiak College" /> 
     17            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA Main" /> 
     18            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA Matanuska-Susitna College" /> 
     19            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA Prince William Sound Community College" /> 
     20            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Bristol Bay Campus" /> 
     21            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Chukchi Campus" /> 
     22            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Community and Technical College" /> 
     23            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Cooperative Extension Service" /> 
     24            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Interior-Aleutians Campus" /> 
     25            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Kuskokwim Campus" /> 
     26            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Main" /> 
     27            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Northwest Campus" /> 
     28            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF Rural College" /> 
     29            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA - Kenai Peninsula Campus" /> 
     30            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA - Kodiak Campus" /> 
     31            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA - Main Campus" /> 
     32            <basic:Rule xsi:type="basic:AttributeValueString" value="UAA - Mat-Su Campus" /> 
     33            <basic:Rule xsi:type="basic:AttributeValueString" value="PWSCC - Prince William Sound" /> 
     34            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - eLearning &amp; Distance Ed" /> 
     35            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Bristol Bay (RB)" /> 
     36            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Chukchi Campus" /> 
     37            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Correspondence Study(CS)" /> 
     38            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Fairbanks Campus" /> 
     39            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Interior-Aleutians (RI)" /> 
     40            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Juneau Fisheries (JU)" /> 
     41            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Kuskokwim Campus" /> 
     42            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Northwest Campus" /> 
     43            <basic:Rule xsi:type="basic:AttributeValueString" value="UAF - Rural College (RE)" /> 
     44        </PermitValueRule> 
     45    </AttributeRule> 
     46 
     47}}} 
     48 
     49Note that the ampersand in one value has to be XML encoded as &amp;