JISC

David Vinograd, April 2002

The following report was prepared for the JISC Committee for Integrated Environments for Learners (JCIEL). The terms of reference are to:

• document the user authentication methods in use, or being considered, in the relevant JISC Circular 7/99 projects
• investigate whether these authentication schemes are capable of being integrated with external authentication schemes, such as those in use or being designed in the UK and other countries. (e.g.: Athens, Sparta, Shibboleth)
• identify areas of concern for the new JISC Circular 01/01 programme
• consider security issues in the managed learning environment, in particular with regard to management information systems

Summary of reccomendations

• All projects were very helpful in the preparation of this report.
• All relevant projects appear to be aware of the need for security and are employing some form of authentication
• Most projects are not prepared for integration with an external access management system such as Athens and the requirement for this level of integration is not altogether clear
• Transfer of data between MIS and MLE systems is in its infancy and is primarily in the MIS to MLE direction. IMS technology is not proving easy to use
• There are a number of common concerns expressed including the need for multiple user logins, improved password management and the lack of user security awareness