SWITCH Identity Blog

The Identity Blog puts the spotlight on identity management, digital identities, identifiers, attributes, authentication and access management.


Which e-ID does Switzerland need?

On 7 March, Switzerland rejected proposed legislation to establish an e-ID.
As a neutral and independent foundation for Swiss universities, SWITCH has over 20 years’ experience in the field of electronic identities and participated in the process of designing the e-ID. We interviewed Christoph Graf, Programme Manager of SWITCH edu-ID, about the next steps in introducing an e-ID in Switzerland and the role SWITCH can play in this process.
Read more.


Three phase adoption at UNIL

Christopher Greiner, service coordinator, UNIL IT:

It has been two months since our move to edu-ID, here is a recap of our trials and tribulations in switching identity provider.

The University of Lausanne (UNIL) successfully migrated to SWITCH edu-ID on the 10th of February 2021.

We had been preparing for this migration for quite a long time: we first heard about the Swiss edu-ID project back in early 2014. Our university had been one of the early adopters of SWITCH AAI, and quite heavy users of the service, so we were very interested in hearing what SWITCH had in store for the future of this digital identity; we decided to take part in the workshops organised by SWITCH, thinking that the earlier we were involved, the easier it would be for us to find solutions specific to our university’s needs.

Figure 1: Poster for the edu-ID migration

Continue reading


Trust & Identity WG Meeting / SWITCH edu-ID Update Event 2021

SWITCH invites you on Wed, 26 May 2021
to the 4th Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event (online).

Registration is open until Friday, 21 May 2020.
There you will find as well the preliminary agenda and meeting topics.
We are looking forward to the contributions of our colleagues from Geneva and Finland.

Details (links etc.) will be provided three days in advance to registered participants.

The event is aimed at the following target groups:

  • IdP and SP Administrators
  • Home Org Administrators
  • RRA & Attribute Policy Administrators
  • IdP hosting customers and
  • IT staff with interest in authentication and authorization

for both – Swiss universities that still use SWITCHaai and those that have already switched over to SWITCH edu-ID.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all

in the Education, Research & Innovation (ERI) Community.

This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


HfH goes edu-ID: a successful first phase


Sarah Frederickx, Head of Digital Learning Center at Hochschule für Heilpädagogik Zürich HfH (University of Teacher Education in Special Needs Education)

Planning

In November 2019, we talked about SWITCH edu-ID seriously for the first time. We planned to work out the changeover in 2020 and so as to actually switch over in 2021. Naturally, it didn’t go as planned. After a thorough analysis of our systems and a definition of our roadmap (two phases) at the beginning of 2020, everybody forgot about the edu-ID implementation project because of the lockdown in March. In May, though, the pressure of the new library system swisscovery, which requires a SWITCH edu-ID account, grew stronger, and we decided to attack our first phase.

The lowest complexity level

Our first phase only had the one goal: changeover to edu-ID. Nothing else! No changes in processes, no changes in our systems. Nothing complex. So, we implemented a linking service and the affiliation administration with our partner who hosts all our students’ mailboxes. Easy-peasy.

Success

Everything went very smoothly in November 2020. Thank you, SWITCH, for all the help, discussions, templates, checklists, and so much more. Thank you, exigo, for the professional and smooth technical implementation.
We had sent an info mail 10 days before the change and a reminder two days before the changeover. Brace yourself after you send out the reminder! The support cases then rose until very shortly after the change. But after a few cases, we had standard email texts for seven different problem cases that almost covered it all. By now, a few months later, 87% of our users have linked their SWITCH edu-ID account to HfH.

Aftermath

We still have lots to do to streamline our processes and make user management better and easier. But before that, we’ll do our second phase, and we’ll do just that.
Our second phase is the change from ‘Linking after admission’ to ‘Linking at registration’. New students will (have to) have an edu-ID before we enter them into our systems. Everything else will come later. With only few resources, we break things down and proceed one step at a time.


1 Comment

UNIBAS: Smooth sailing with SWITCH edu-ID

Project team: 
Dominik Hofer, Stefan Keller, Andreas Scheppele (KOGIT GmbH), Xiang Wang, Erwin Wendelspiess, Jan Stucki, Thomas Mundschin

Successful transition

“For the University of Basel (UNIBAS), the changeover to SWITCH edu-ID went smoothly. The project was a success, because everything was well prepared from a technical point of view and it did not cause any big issues with regard to communication and user feedback.
Successful projects often remain “under the radar”. The management sometimes hardly notice projects, when everything is running smoothly. This is our motivation to write this short success story:

Continue reading


PH Zug + edu-ID: Linking should be easy for users

With the University of Teacher Education Zug, the second PH switched to SWITCH edu-ID on 7 October 2020.

Abdel Benhauresch, head ICT PH Zug

Abdel Benhauresch (head of the ICT PH Zug), can you tell us a little bit about how the adoption of SWITCH edu-ID took place and what further objectives the PH Zug is pursuing after the successful changeover?

“We are a relatively small university with a core of about 800 users and about three times as many people who attend our continuing education courses.
Accordingly, our IT is small and efficiently structured. Projects have to be well planned and implemented in stages.
The preparations for the adoption of SWITCH edu-ID started two years ago. At first it was unclear when the new Campus Management System (CMS) would go live. Finally, we decided to switch to edu-ID first and to use the new system not before 2021. This means that we will then have to check the interaction of edu-ID with the new CMS.
For the linking process we decided to use a function in Microsoft Azure, because all our users use an Azure Active Directory account (AAD) to authenticate.

Continue reading


PHBern now also on the road with edu-ID

On August 19, 2020, the Berne University of Teacher Education (PHBern) switched over to SWITCH edu-ID, thus filling the dozen:


More than 8000 students and employees of the PHBern now have an edu-ID account and can use it to access services of their own PH as well as those of other Swiss universities which are open to members of PHBern.

Ulrich Weisenseel, head Services Informatik PHBern, about the planning and adoption:

“When the first planning steps were taken in 2018, the analyses showed that PHBern users accessed more than 100 services via AAI accounts. A picture that looks similar at many universities. University members usually access 10 to 20 times more external than internal services, with the number of logins naturally being highest for the most prominent services such as a university’s own Learning Management System. At PHBern, ILIAS and the intranet “My PHBern” swing out at the top in terms of access numbers.

Continue reading


Ensure secure SWITCHaai login: Turning off outdated security protocols

The TLS protocol secures the communication between a user’s web browser and a server running a web application. The user recognises a secured communication by the lock visualised in the web browser or the https prefix in a link.
The security protocols TLSv1.0 and TLSv1.1 are outdated and no longer rated as secure. Therefore, web server administrators should plan to properly protect their services by updating their web server configuration to require at least TLSv1.2.
To apply this security improvement to SWITCHaai including SWITCH edu-ID, SWITCH announces the upgrade in two phases.

Continue reading


1 Comment

Update to the TRID WG Meeting / SWITCH edu-ID Update Event 2020

The Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event on Wed 20 May 2020

Registration is open until Friday, 8 May 2020 and mandatory (only registered users and accepted guests may enter the meeting room).

The event is aimed at the following target groups: IdP and SP Administrators, Home Org Administrators, RRA & Attribute Policy Administrators, IdP hosting customers and IT staff with interest in Microsoft / Office 365  for both – Swiss universities that still use SWITCHaai and those that have already switched over to SWITCH edu-ID.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all SWITCHaai Participants and SWITCHpki Participants in the SWITCH Community and the Extended SWITCH Community.
This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


1 Comment

SWITCH edu-ID as door opener for libraries

In December 2020, the Swiss Library Service Platform SLSP goes live[1] after six years of preparation.
From then on, library users will use their SWITCH edu-ID account to register with their research libraries and catalogues. This is expected to affect between 0.5 and 1 million users – especially all Swiss university members.

Thomas_Marty_web

Thomas Marty (director SLSP)

“In today’s knowledge society, unrestricted and timely access to scientific information is of great importance. By guaranteeing access to diverse information resources, academic libraries play a central role in research and teaching at universities, but also in the lifelong learning of the population. SLSP sees itself as a service provider for all academic libraries and contributes to establishing a seamless flow of information for the knowledge society”.

Continue reading


Trust & Identity WG Meeting / SWITCH edu-ID Update Event 2020

SWITCH invites you on Wed, 20 May 2020 to the 3rd Trust & Identity WG Meeting combined with the SWITCH edu-ID Update Event in Berne – or if the specific situation persists online instead.

Registration is open until Friday, 8 May 2020 and required for logistical reasons.
Refer to the registration page for the preliminary schedule and meeting topics.

In case of presence we have foreseen to hold the program between 10:15 and 15:40.
If the event must take place online, we will shorten the program and run from 9-12, including a break.

The event is aimed at the following target groups: IdP and SP Administrators, Home Org Administrators, RRA & Attribute Policy Administrators, IdP hosting customers and IT staff with interest in Microsoft / Office 365  for both – Swiss universities that still use SWITCHaai and those that have already switched over to SWITCH edu-ID.


What’s the SWITCH Trust & Identity WG?
The SWITCH Trust & Identity WG comprises representatives of all SWITCHaai Participants and SWITCHpki Participants in the SWITCH Community and the Extended SWITCH Community.
This group is informally involved with the further development of SWITCHaai/edu-ID and SWITCHpki and has the opportunity to provide feedback if there are questions or changes upcoming.


Semester starts at UNIFR with SWITCH edu-ID

The University of Fribourg (UNIFR) has also been working with SWITCH edu-ID since 28 January 2020.

Do not let yourself be locked out!

With a targeted campaign, the University of Fribourg persuaded around 90% of its users to link their accounts before switching over to SWITCH edu-ID:

 

Poster and website campaign / Number of linked accounts and times of email dispatch

Continue reading


ZHdK starts the year 2020 with SWITCH edu-ID

Right at the start of the year on 8 January 2020, the Zurich University of the Arts (ZHdK) switched over to SWITCH edu-ID.

Smooth changeover thanks to good preparation and a high ‘linking’ success rate

Technically, everything was threaded perfectly and the changeover of the IdP went off without a hitch. After initialization and planning in 2018, the work could be started at the beginning of 2019 with the development of the connector, followed by the setup of the linking service and the migration of the IdP. The fact that everything went so smoothly was partly due to the fact that a large number of users had linked their accounts in time for the migration:

Target group Target value
Success rate
Students 60 % 67.4 %
Lecturers 60 % 68.5 %
Midlevel faculty 70 % 83.1 %
Staff 70 % 79.1 %
Externes 0 % 5.3 %

The communication measures were very successful with all target groups.
These consisted of a post in the Rectorate newsletter, a poster at the helpdesk, multiple e-mails sent to people without a linked account (maximum of three follow-ups and a final e-mail to users of the three most frequently used services), a message in the Rectorate newsletter shortly before the changeover, and detailed instructions on how to create and link the edu-ID account. E-mails were sent to the different groups of people in a staggered manner. This meant that support before and after the changeover to SWITCH edu-ID was uncomplicated and that the work involved was predictable and manageable.

Continue reading


ZHAW has switched to edu-ID – with around 20,000 people!

The Zurich University of Applied Sciences (ZHAW) is using SWITCH edu-ID as replacement for the former AAI accounts and IdP since October 18. With currently around 20,000 persons with ZHAW affiliation, it is the largest university to date to use edu-ID.

Planning and reality

The ZHAW is one of the “Early Bird” universities that have already started planning the transition in 2017. The ZHAW coined the term “script cemetery” – a term for IdM processes that are based on many scripts difficult to maintain. The university therefore decided to replace its existing IdM. The edu-ID planning was part of this redesign project. Right from the start, the project manager succeeded in bringing all relevant stakeholders together at one table and also involving the departments where necessary, so that the migration plan was available in February 2018.
Continue reading


Applying for Medical School using SWITCH edu-ID

Anyone wishing to begin studying human medicine, dentistry, veterinary medicine or chiropractic must register online with swissuniversities.

Since this year, authentication is exclusively done with SWITCH edu-ID on the Medon registration platform. Thus Medon uses a unique feature that was introduced with edu-ID in the Swiss AAI federation: anyone can create an edu-ID account and use it in the context of academic services.

Continue reading