Background Information

• Read some Background Information about the concept of federation and the motivation for Tuakiri to provide federated identity and access management
• See Technical Background Information for general technical background information on Shibboleth and SAML2
• Organisations participating in the NZ Access Federation must install and operate software systems that can inter-operate with other participants. See the Protocol and Software Guidelines for information on recommended software

Information for Identity Providers

• Installation guidelines:

  • Installing a Shibboleth 3.x IdP
  • Upgrading a 2.x IdP to 3.x
  • Upgrading a Shibboleth 3.x IdP (within 3.x version range)
  • Mapping Tuakiri attributes to your own identity management system attributes
  • Configuring an existing Shibboleth Identity Provider to join the Tuakiri Federation
  • Replacing back-channel certificate and key on an IdP
  • Archived resources:
    • Installing a Shibboleth 2.x IdP
    • Upgrading a Shibboleth 2.x IdP (within 2.x version range)

• External Resources

  • A case study written by Landcare Research about the technical and organisational things they encountered while implementing their IdP: Landcare case study

• Other Resources

  • Guidelines to help you make use of the Enhanced Client/Proxy profile

  • Guidelines to help you make use of the Single Log Out (SLO)

  • Information on Tuakiri attributes

  • Detailed information on Levels of Assurance
    

Information for Service Providers

• Installation Guides

  • Installing Shibboleth SP on RedHat based Linux

  • Install Shibboleth SP on Debian Based linux (and Ubuntu as well)
    
  • Installing a SimpleSAMLphp SP
    

• External Resources

  • Configuring Shibboleth authentication with DSpace
  • Shibboleth authentication with Drupal
  • Active Directory Federation Services guides (this includes a deployment guide for Shibboleth 2, ADFS 2, and Sharepoint 2010)
• Other Resources
  • Adding a Service Provider to the Tuakiri Federation
  • Replacing back-channel certificate and key on an SP
  • Recommendations

  • Guidelines to help you make use of the Enhanced Client/Proxy profile.

  • Guidelines to help you make use of the Single Log Out (SLO)

  • Information on Tuakiri attributes

  • Detailed information on Levels of Assurance

eduGAIN resources

Federation Services

• Guidelines and procedures to assist in the management of Federation Registries
• Tuakiri Virtual Home User guide
• Tuakiri Virtual Home Administrator guide