Scope
The role of federated authentication at the NIH is to enable users of one domain to securely access data or systems of another domain seamlessly, and without the need for completely redundant user administration.
Expected Value
Federated authentication will help to reduce cost at the NIH by eliminating the need to scale one-off or proprietary solutions. It will also increase security and lower risk by enabling the NIH to identify and authenticate a user once, and then use that identity information across multiple systems, including external partner websites. Federated authentication will also improve privacy compliance by allowing the user to control what information is shared, or by limiting the amount of information shared. It will also improve the end-user experience by eliminating the need for new account registration through automatic ‘federated provisioning’ or the need to redundantly login through cross-domain single sign-on.
2008 1st Quarter
- Establish PKI credential to SAML assertions interoperability
- MOA signed for Level 2 InCommon credentials
This plan is subject to change as business conditions change. Please check back often. Contact us if you have questions or concerns about the Program Plan.
Last Updated:
November 16, 2007