Evaluating the Efficiency and Effectiveness of a Federated SSO Environment Using Shibboleth

• 作者: Faisal Md. Abdur Rahman Parves Kamal Raihan Taher Saad Mustafiz
• 来源期刊: 信息安全(英文)
• 学科: 医学
• 关键词: SHIBBOLETH SSO ATHENS Kerberos Identity PROVIDER (IdP) Service PROVIDER (SP) TOMCAT Microsoft PASSPORT
• 年，卷（期）: 2015,（3）
• 页码范围: 166-178
• 页数: 13页
• 分类号: R73

摘要

The notion of this project is derived from our practical use of user authentication system namely Shibboleth at the University of Bedfordshire. It has been found that the University of Bedfordshire controls its various services including student portal Breo, Learning Resources and Student Email Access and others through the Shibboleth. Like the University of Bedfordshire the other Universities in the UK are also implementing the Shibboleth system in their access management control. Therefore, the researchers of this project have found it important to evaluate its efficiency and effectiveness of Shibboleth from different perspectives. In the first part of this paper it tries to explain the features of Shibboleth as SSO services and compares it with other SSO services like Athens, Kerberos, etc. Then in the middle section, the authors go through the steps of installation and configuration of the Shibboleth. In the end of the paper, based on the survey of real users of Shibboleth at the University of Bedfordshire, the authors give its insights on the effectiveness of the Shibboleth as SSO service. Throughout this investigation, the authors have applied a triangulation to find out user and service provider viewpoint about Shibboleth. Although there were some problems persisted, the authors also implemented the Shibboleth system successfully to figure out different problems, efficiency and effectiveness. The recommendations and conclusion have been provided at the end of this project.