SWITCH Identity Blog

The Identity Blog puts the spotlight on identity management, digital identities, identifiers, attributes, authentication and access management.


Leave a comment

A fast track to edu-ID for PHZH

End of June 2020 PH Zurich has adopted SWITCH edu-ID.

Pascal Schmitt, team leader webcenter PH Zurich about this experience:

“With regard to the future library system solution SLSP, PH Zurich has decided to push the changeover from SWITCHaai to SWITCH edu-ID.

After the first technical workshop with SWITCH, it soon became clear that we would opt for a loose integration of edu-ID (linking after admission scenario) and that this would mean an easily manageable effort for us to implement the necessary changes.
A central identity management system was already in place at PH Zurich and it was only a matter of

  • connecting the affected edu-ID identifiers with the account information of the PH Zurich and to
  • extend some processes.

However, there was a challenge that we did not see from the beginning: In order to ensure compatibility with SWITCHaai – specifically that service providers already using SWITCHaai recognize a person even after the adoption of edu-ID – the former AAI ID must be written into the affiliation itself. This has to be taken into consideration when building a so-called linking service.

The tests ran all perfectly and the switch was made in no time.
Only 4 months passed from the decision to implement SWITCH edu-ID to the actual conversion. This fast changeover was also possible thanks to the good and timely support by SWITCH.”

Links:


Leave a comment

TRID WG Meeting & SWITCH edu-ID Update Event: Look back and forth

This was the first time we could not meet in person at Berne. But still it was a very inspiring occasion for us to come together via SWITCHinteract on May 20.
Around 50 members of universities and related organisations have participated in this three hours online meeting with a very dense programme which illuminated various aspects of SWITCH edu-ID.

Our first keynote speaker Stéphane Recrosio (UNIFR) has provided insights about the adoption of SWITCH edu-ID at the university of Fribourg like planning, communication, support and do’s and don’ts as a result of the experience gained.

While the second keynote speaker Maarten Kremers (SURFnet) talked about the implementation of eduID in the Netherlands it became obvious that similarities to SWITCH edu-ID are probably not purely coincidental.

Beside those two presentations many topics could only be touched upon briefly due to the shortened programme duration, like SLSP status, Kerberos/SPNEGO, Office365, technical accounts, duplication handling, re-use of email addresses, small organisations, service description, eduroam.ch, edu-ID roadmap or AAI and PKI news.
The complete presentations are available here.

The current list of universities adopting SWITCH edu-ID is published on the SWITCH edu-ID website. Only 4 time slots are are still available in 2020.

We hope to see you again in person at Berne during the next Trust & Identity Working Group Meeting and SWITCH edu-ID Update event on May 19 May 26 2021 – please save the date!


The very last call for funding!

Update 6 May 2020/cg: Due to shifted priorities in the course of the COVID-19 pandemic, SWITCH decided to add an additional call for participation. This article – originally published in February 2020 – is now being republished with new timing information.

The Swiss edu-ID project has been running since 2014 and comprises several phases. The last phase starts in May July 2020 and is expected to last until the end of 2020 (Deployment Step 4.23).

In this phase, universities can again submit project applications for planning & migration to SWITCH edu-ID.

LAST OPPORTUNITY TO APPLY FOR FEDERAL FUNDING, which will be made available by swissuniversities within the framework of the P-5 programme.
DEADLINE FOR SUBMITTING APPLICATIONS IS 31 MARCH May 2020.

Eligible to apply are recognised universities which have already started planning work (regardless of whether this work has been completed so far or not).
The application should be made using the sub-project application form.
In the case of a migration project, the application is supplemented by a brief description of the scenarios and the procedure.
If you have any questions and in order to obtain the appropriate template, please contact eduid@switch.ch.

In the meantime, six universities and two other organisations have switched to SWITCH edu-ID. Various universities are already planning to switch from AAI to SWITCH edu-ID in 2020. Interested institutions should therefore announce their plans as soon as possible, so that SWITCH can coordinate the preparatory work and changeover date with them.


1 Comment

Update to the TRID WG Meeting / SWITCH edu-ID Update Event 2020

The Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event on Wed 20 May 2020

Registration is open until Friday, 8 May 2020 and mandatory (only registered users and accepted guests may enter the meeting room).

The event is aimed at the following target groups: IdP and SP Administrators, Home Org Administrators, RRA & Attribute Policy Administrators, IdP hosting customers and IT staff with interest in Microsoft / Office 365  for both – Swiss universities that still use SWITCHaai and those that have already switched over to SWITCH edu-ID.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all SWITCHaai Participants and SWITCHpki Participants in the SWITCH Community and the Extended SWITCH Community.
This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


1 Comment

SWITCH edu-ID as door opener for libraries

In December 2020, the Swiss Library Service Platform SLSP goes live[1] after six years of preparation.
From then on, library users will use their SWITCH edu-ID account to register with their research libraries and catalogues. This is expected to affect between 0.5 and 1 million users – especially all Swiss university members.

Thomas_Marty_web

Thomas Marty (director SLSP)

“In today’s knowledge society, unrestricted and timely access to scientific information is of great importance. By guaranteeing access to diverse information resources, academic libraries play a central role in research and teaching at universities, but also in the lifelong learning of the population. SLSP sees itself as a service provider for all academic libraries and contributes to establishing a seamless flow of information for the knowledge society”.

Continue reading


Trust & Identity WG Meeting / SWITCH edu-ID Update Event 2020

SWITCH invites you on Wed, 20 May 2020 to the 3rd Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event in Berne – or if the specific situation persists online instead.

Registration is open until Friday, 8 May 2020 and required for logistical reasons.
Refer to the registration page for the preliminary schedule and meeting topics.

In case of presence we have foreseen to hold the program between 10:15 and 15:40.
If the event must take place online, we will shorten the program and run from 9-12, including a break.

The event is aimed at the following target groups: IdP and SP Administrators, Home Org Administrators, RRA & Attribute Policy Administrators, IdP hosting customers and IT staff with interest in Microsoft / Office 365  for both – Swiss universities that still use SWITCHaai and those that have already switched over to SWITCH edu-ID.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all SWITCHaai Participants and SWITCHpki Participants in the SWITCH Community and the Extended SWITCH Community.
This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


Semester starts at UNIFR with SWITCH edu-ID

The University of Fribourg (UNIFR) has also been working with SWITCH edu-ID since 28 January 2020.

Do not let yourself be locked out!

With a targeted campaign, the University of Fribourg persuaded around 90% of its users to link their accounts before switching over to SWITCH edu-ID:

 

Poster and website campaign / Number of linked accounts and times of email dispatch

Continue reading


ZHdK starts the year 2020 with SWITCH edu-ID

Right at the start of the year on 8 January 2020, the Zurich University of the Arts (ZHdK) switched over to SWITCH edu-ID.

Smooth changeover thanks to good preparation and a high ‘linking’ success rate

Technically, everything was threaded perfectly and the changeover of the IdP went off without a hitch. After initialization and planning in 2018, the work could be started at the beginning of 2019 with the development of the connector, followed by the setup of the linking service and the migration of the IdP. The fact that everything went so smoothly was partly due to the fact that a large number of users had linked their accounts in time for the migration:

Target group Target value
Success rate
Students 60 % 67.4 %
Lecturers 60 % 68.5 %
Midlevel faculty 70 % 83.1 %
Staff 70 % 79.1 %
Externes 0 % 5.3 %

The communication measures were very successful with all target groups.
These consisted of a post in the Rectorate newsletter, a poster at the helpdesk, multiple e-mails sent to people without a linked account (maximum of three follow-ups and a final e-mail to users of the three most frequently used services), a message in the Rectorate newsletter shortly before the changeover, and detailed instructions on how to create and link the edu-ID account. E-mails were sent to the different groups of people in a staggered manner. This meant that support before and after the changeover to SWITCH edu-ID was uncomplicated and that the work involved was predictable and manageable.

Continue reading


ZHAW has switched to edu-ID – with around 20,000 people!

The Zurich University of Applied Sciences (ZHAW) is using SWITCH edu-ID as replacement for the former AAI accounts and IdP since October 18. With currently around 20,000 persons with ZHAW affiliation, it is the largest university to date to use edu-ID.

Planning and reality

The ZHAW is one of the “Early Bird” universities that have already started planning the transition in 2017. The ZHAW coined the term “script cemetery” – a term for IdM processes that are based on many scripts difficult to maintain. The university therefore decided to replace its existing IdM. The edu-ID planning was part of this redesign project. Right from the start, the project manager succeeded in bringing all relevant stakeholders together at one table and also involving the departments where necessary, so that the migration plan was available in February 2018.
Continue reading


University of St. Gallen has adopted SWITCH edu-ID

On July 17 2019, the University of St. Gallen and SWITCH have flipped the switch.
From now on, members of the university will use SWITCH edu-ID accounts to access federated services.
Armin Schibli, Thomas Köppel and Thomas Mesaros drove the project forward and ensured the successful implementation in St. Gallen.

One of the early birds

The University of St Gallen was one of the first planning phase participants in 2017 and therefore, ready to start planning at a time when not all components of the SWITCH edu-ID service were available and no clear paths for adoption had been defined.
Nevertheless, the IT team was ready to accept the challenge and held intensive discussions with SWITCH and the local stakeholders to find the best suitable way to adopt SWITCH edu-ID. The result was what we internally call “the St. Galler model”.

Continue reading


NOT for university members only

FHNW e-media offering for teachers uses Shared Attribute API

In principle open

Openness is one of the promises made by SWITCH edu-ID. In recent years, universities have increasingly opened up to additional user groups such as continuing education students or MOOC participants. Cooperation with external parties is becoming increasingly important overall, be it with other universities, research institutions or partners from the private sector. Academic institutions are expanding their offerings, and not every person who makes use of university services has to become an official member of the university.

But that’s why you let everyone in?

However, most service providers do not simply want to blindly trust a self-declared identity that users bring with them (i.e. a “naked” edu-ID).
There are many reasons why one wants to protect applications and content from unauthorized access, e.g. to prevent data theft or manipulation or to comply with data protection or license regulations. And if abuse has taken place despite all precautions, one wants to be able to find out who one can hold liable for damages. Of course, this can be difficult with unchecked identities, even if the majority of users behave correctly and have provided the correct personal data for their digital identity. So is this a reason not to trust edu-ID identities?
Continue reading


Trust & Identity WG Meeting / SWITCH edu-ID Update Event 2019

SWITCH invites you on Wed, 15 May 2019 to the 2nd Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event in Berne.

Registration is open until Tue, 7. May 2019 and required for logistical reasons.
Refer to the registration page for the draft agenda and schedule.

A longer section of the event is dedicated to SWITCH edu-ID. The heads of IT of University of Lucerne and Distance University will talk about their adoption experience.

Administrators of either an Identity Provider or Service Provider registered in SWITCHaai as well as the SWITCHpki registration authority operators and all persons involved in (future) planning and adoption of SWITCH edu-ID are invited to participate.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all SWITCHaai Participants and SWITCHpki Participants in the SWITCH Community and the Extended SWITCH Community.
This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


Distance University too uses now edu-ID

On 6 March 2019, Distance University became the second university to switch to SWITCH edu-ID for authentication and access to its services. Here is an extract from their experience:

IT as a driving force

The project was primarily carried out by the IT department – supported by Marketing. All information had to be written in German and French. Student managers, who act as the first contact persons for teachers and students, were trained in advance by IT.

It took about 1.5 years from the initial discussions with SWITCH to the completion of the project. Distance University IT spent in total one man-month developing and testing the technical implementation. In addition, project management and communication were particularly time-consuming.

Information campaign as key

The Distance University launched an information campaign in the summer of 2018, thus persuading 75% of the university members to create an edu-ID account. The scenario “Linking before day X” was used for current users. The creation/linking of the account was simple and user acceptance correspondingly high.
Continue reading


Submit your Sub-Project for Planning and/or Adoption!

In August we’ve submitted our last project application for Swiss edu-ID – the Deployment Steps 3 & 4 – to swissuniversities. Intended is a two-year project during 2019 and 2020 that contains just as before two parts:

  • further development of features (functional extensions) and
  • planning and adoption activities of universities (deployment).

In order to allow non-bureaucratic and more agile handling especially for the planning phases, universities can now requests for third-party funding twice a year and therefore can become much easier a project partner and start funded activities.

If third-party funding would be beneficial to your university, please consider to submit a sub-project on the following dates:

  • 30.11.18 (project start January 2019)
  • 31.5.2019 (project start July 2019)
  • 30.11.2019 (project start January 2020)
  • 31.3.2020 (if there is still funding available; project start May 2020)

You find the one-page application form on our project website.

The application must be addressed to SWITCH, but the same rules apply as for projects submitted to swissuniversities (at least 50% own funds, reporting etc.).*

Universities with no need for third-party funding can start a sub-project – in consultation with us – at any time.

Don’t hesitate to contact us and join the group of already 24 universities!

* NOTE: This procedure is subject to approval by swissuniversities (expected for December 2018)