Published on February 19, 2014
SURFconext and Mobile Boy Baukema, Ibuildings.nl
Boy Baukema Senior Software Engineer @ Ibuildings.nl Core SURFconext dev
What’s to come ● What is SURFconext? ● Let’s see the problem it solves ● Solving Identity issues with SAML2 ● Securing your API with OAuth2
SURFconext is... … a way to instantly get access to 1.000.000 potential users … a way to instantly gain access for your users to 100+ services … a way to quickly allow guest access or cooperation with other institutions
An example... Scheduling
Then came mobile Scheduling Mobile Scheduling
We’re not a one stop shop Scheduling Mobile Scheduling users Grades users
Sharing is caring Scheduling Mobile Scheduling Grades users
Then came the cloud... Google Apps users Scheduling Mobile Scheduling Grades Box users Liferay users users
And third party apps... Scheduling Android Google Apps users Scheduling Mobile Scheduling Grades Box users Liferay users users
And aliens! Scheduling Android Google Apps users Scheduling Mobile Scheduling Grades Box users Liferay users users
ACCOUNTS ACCOUNTS EVERYWHERE
Enter SAML2 Web SSO Server Provider Identity Provider
SAMLized Scheduling Android Google Apps Scheduling Mobile Grades Identity Provider Box users Scheduling Liferay
Enter SURFconext Scheduling Scheduling Mobile Scheduling Android Google Google Apps Google Apps Apps Identity Provider Box Box Box users Liferay Liferay Liferay Grades Identity Identity Provider Provider Identity
So how about them third party apps Scheduling Mobile username & password Scheduling username & password Scheduling Android username & password
A delicate dance
What this means in our case Scheduling Android Scheduling Mobile Resource Server AuthN Server Identity Provider Scheduling username & password
That’s just the beginning... ● ● ● ● ● ● Virtual Organizations Transparent Login api.surfconext.nl Sharing group information OpenSocial …
Google Apps includes some non-web based interfaces for mobile and desktop access, most notably the IMAP for mail and CalDAV for calendaring. If you want ...
SURFconext and rich clients. ... PoC apps SURFconext on mobile devices; Internal SURFnet document 2011: Rich clients en federatieve login (DRAFT) - In Dutch;
SURFconext and rich clients. While many of our customers show a great interest in the educational offerings of services like Google Apps and Microsoft ...
Cloud services connected to SURFconext; What is SURFconext? ... Easy videoconferencing via web and mobile or high-end telepresent systems. Weblicht ...
Mobile & Wireless; Network; ... Using SURFconext introduces a new ‘link’ in communication between institutions and services (such as cloud services).
SURFconext for SharePoint 2010 Setup guide ... SURFconext needs metadata of your AD FS ... contact information such as e-mail address and mobile ...
Colophon Programme line : SURFworks Part : SURFconext Infrastructure Activity : SII-12-11 Deliverable : SII-12-11 Q2 Access rights : Public
Core services: SURFconext, SURFfederatie, SURFteams, resource broker . 8 . SURFnet. ... - Heterogeneous network access, including mobile and wireless