Cirrus Identity Blog | Higher Education

 

InCommon and Azure AD - The Multilateral Federation Challenge

Multilateral federation facilitates collaboration across multiple organizations around the world. InCommon, CAF, UK Federation and all eduGAIN federations utilize multilateral federation. It is a critical component to Identity and Access Management architecture in higher education and research. Azure AD does not support multilateral federation natively, but there are solutions available to fill the gap.

In identity management, a System of Record is an authoritative source for data about user or other entity. At many higher education institutions, the System of Record is the starting point for creating a directory of users including students, staff, and other people associated with the institution.

AN IDENTITY MANAGEMENT NIGHTMARE - PART 2 OF 3

Introduction from Cirrus Identity CEO, Dedra Chamberlin:

One of the biggest pain points in Higher Education is the ridiculous number of user accounts High School students have to create when applying to college. Cirrus Identity was fortunate to have an intern who recently went through the process, and was willing to blog about it! Without further ado, here is part 2 of her post...

An Identity Management Nightmare - Part 1 of 3

This blog also published on medium.

Introduction from Cirrus Identity CEO, Dedra Chamberlin

At the University of Maryland, Baltimore County (UMBC), new students and their parents attend summer orientations to learn all about the campus. Parents always ask, “how can I access information about my child's course schedule, tuition, and their grades”? Up until Cirrus Identity, the answer has been, "talk to your kid!" As parents, we know that is often a difficult task as students are engrossed in their college lives. Parents need a way to check in without having to track down their sons and daughters.

One of the most widely adopted unique identifiers in higher education federated identity management is eduPersonPrincipalName (ePPN), defined as part of the eduPerson LDAP schema established by Internet2’s Middleware Architecture Committee for Education (MACE-dir). Historically, ePPN is defined by a campus and includes a local, unique identifier (netID) scoped at the campus domain, e.g. netID@university.edu.