<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:11pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>We've toyed with the idea of adding an IdP node or two in Azure or AWS, to keep authentication to cloud services running for off-campus users in the unlikely event that Iowa City disappears from the face of the earth. I believe it's on our roadmap for first
half of FY18. (Building out authentication infrastructure in the cloud, that is.)</p>
<p><br>
</p>
<p>Because we'd want to maintain full functionality without any times to campus, this would be predicated on getting at least one AD domain controller positioned out in the cloud, in addition to a replica of our identity data warehouse (our attribute store).</p>
<p><br>
</p>
<p>Michael</p>
<p></p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Y Levine <ylevine20@gmail.com><br>
<b>Sent:</b> Thursday, November 16, 2017 1:48:10 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: cloud based Shibboleth IDPs</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Yes --- in AWS.</div>
<div><br>
</div>
<div>No issues --- just the server location is in the cloud, rather than VM on premise.</div>
<div><br>
</div>
<div>You have to account for usual firewall etc if Shib is referencing AD on-prem --- but that is straightforward networking to resolve.<br>
</div>
</div>
<div class="x_gmail_extra"><br>
<div class="x_gmail_quote">On Wed, Nov 15, 2017 at 10:16 AM, Liam Hoekenga <span dir="ltr">
<<a href="mailto:liamr@umich.edu" target="_blank">liamr@umich.edu</a>></span> wrote:<br>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">We've been asked to investigate moving core services from on-premise data centers to the cloud.
<div><br>
</div>
<div>I know we're not the only ones in this situation. I'd like to talk to people have are in process of moving / or have already moved their IDPs to the cloud.</div>
<div><br>
</div>
<div>Please contact me off list.</div>
<span class="x_HOEnZb"><font color="#888888">
<div><br>
</div>
<div>
<div>-- </div>
<div>Liam Hoekenga</div>
<div>ITS Identity and Access Management</div>
<div>The University of Michigan</div>
<div><a href="mailto:liamr@umich.edu" target="_blank">liamr@umich.edu</a></div>
<div><br>
</div>
<br>
</div>
</font></span></div>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">
https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.<wbr>net</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</body>
</html>