cloud based Shibboleth IDPs

[Domingues, Michael D]

We've toyed with the idea of adding an IdP node or two in Azure or AWS, to keep authentication to cloud services running for off-campus users in the unlikely event that Iowa City disappears from the face of the earth. I believe it's on our roadmap for first half of FY18. (Building out authentication infrastructure in the cloud, that is.)


Because we'd want to maintain full functionality without any times to campus, this would be predicated on getting at least one AD domain controller positioned out in the cloud, in addition to a replica of our identity data warehouse (our attribute store).


Michael

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Y Levine <ylevine20 at gmail.com>
Sent: Thursday, November 16, 2017 1:48:10 PM
To: Shib Users
Subject: Re: cloud based Shibboleth IDPs

Yes --- in AWS.

No issues --- just the server location is in the cloud, rather than VM on premise.

You have to account for usual firewall etc if Shib is referencing AD on-prem --- but that is straightforward networking to resolve.

On Wed, Nov 15, 2017 at 10:16 AM, Liam Hoekenga <liamr at umich.edu<mailto:liamr at umich.edu>> wrote:
We've been asked to investigate moving core services from on-premise data centers to the cloud.

I know we're not the only ones in this situation.  I'd like to talk to people have are in process of moving / or have already moved their IDPs to the cloud.

Please contact me off list.

--
Liam Hoekenga
ITS Identity and Access Management
The University of Michigan
liamr at umich.edu<mailto:liamr at umich.edu>



--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171116/8647b5f1/attachment.html>