6th European Conference - Academic Conferences

Maria Semmelrock-Picej et al.
Company B, on the other hand, represents all enterprises running their own IDM systems. Those
companies have to install and configure the Shibboleth IdP software on the IT systems within their
company and connect their IDM solution appropriately. Furthermore the Shib IdPs have to be
registered and connected with the SPIKE WAYF service. Such companies do not need SPIKE’s
IDMS.
In the following, two sequence diagrams show the general procedure for connecting an external IDMS
to SPIKE as well as making use of SPIKE’s integrated IDM solution on a high level basis. The shown
diagrams are reduced to IDM-related steps.
Figure 3 represents the high-level procedure for connecting an external IDMS with the SPIKE
platform. Firstly an administrator of the collaborating company has to install and configure the
Shibboleth IdP software (1). After that a connection between the companies’ IDMS and the Shibboleth
IdP needs to be set up by registering the IDMS (2). According to the required attributes of SPIKE and
the respective resources provided by the alliance partners the administrator of the company can
assign attributes to the involved digital identities (3). The attributes required to access a resource
provided by a service provider are defined during the configuration phase of the SP [D7.2b]. After the
project has finished all connections are disabled and Shibboleth IdP will be uninstalled (4).
Figure 3: Connecting external IDMS with SPIKE
Figure 4 shows a high-level procedure for using SPIKE’s IDMS.
Figure 4: Using SPIKE IDM system
In order to make use of SPIKE’s IDMS, firstly the SPIKE administrator has to create a respective user
account equipped with sufficient access rights and attributes for the responsible user of the particular
company (1). The administrator of company N establishes the needed digital identities in the IDMS of
242