SAML Identity Provider Services

*SAML (Security Assertion Markup Language) is an XML-based framework for authentication and authorisation between two entities: a Service Provider and an Identity Provider . SAML is a standard single sign-on (SSO) format.

• Standby SAML Identity Provider
• Hosting SAML Identity Provider
• Managed SAML Identity Provider

This service will process SAML authentication requests on HEAnet infrastructure when HEAnet detects that the primary SAML Identity Provider service is unavailable on campus.

The service includes Active Directory replication via VPN tunnel, the Identity Provider is based on Shibboleth or Microsoft Active Directory Federation Services.

With this service, HEAnet host a Shibboleth Identity Provider service on its infrastructure to authenticate users over a VPN tunnel to the campus Active Directory.

The service includes the institutional branding, directory schema mapping, monitoring, maintenance and allows for a hostname within the institutions DNS domain.

HEAnet’s Managed SAML Identity Provider service provides remote monitoring and management of an institutions Shibboleth Identity Provider, this management extends to multiple instances whether on-campus or hosted by HEAnet.

The service is designed to allow an institution to rely on HEAnet’s expertise for troubleshooting Shibboleth Identity Provider issues or planning for campus directory changes or co-ordination with new SAML service providers who are not Edugate compliant.

For further details, please contact our services desk noc@heanet.ie