participation is separate from membership in Internet2.
InCommon Technical Advisory Committee - Group of individuals that provide technical guidance and direction for InCommon.
InQueue - InQueue is a federation of organizations who are interested in using the Shibboleth technology and exploring how federations work prior to joining a production federation such as InCommon. Participation in InQueue is open to any technically qualifying organization. http://inqueue.internet2.edu/
Issuer - The CA that issues a certificate.
LDAP directory - An LDAP directory is one that supports the Lightweight Directory Access Protocol (LDAP). LDAP is a widely adopted IETF standard directory access protocol well suited to the authentication and authorization needs of modern application architectures.
Liberty Alliance - A consortium of technology and consumer-facing organizations, formed in September 2001 to establish an open standard for federated network identity. http://www.projectliberty.org/
Lightweight Directory Access Protocol (LDAP) - An IETF standard for directory services.
Lightweight Directory Inter-exchange Format (LDIF) - A protocol for exchange of information among LDAP directories.
metadata - Data about data, or information known about an object in order to provide access to the object. Usually includes information about intellectual content, digital representation data, and security or rights management information.
namespace - A set of names in which all names are unique.
NetID - An electronic identifier created specifically for use with on-line applications, often an integer and typically with no other meaning.
Participant - An organization accepted into the InCommon Federation that has met all the criteria for participation as either a higher education institution or a Sponsored Partner.
Participant Agreement (PA) - This is the "contract" that a potential Participant signs when they are
accepted by the Federation. This document outlines information such as
fees, and responsibilities to participate in InCommon.
Participant Operating Practices (POP) - This document describes how InCommon Participants need to describe
their credential and identity management system.
Profile - Data comprising the broad set of attributes that may be maintained for an identity, and the data required to authenticate under that identity.
public key cryptography - A cryptographic technique that uses two keys: the first key is always kept secret by an entity, and the second key, which is uniquely linked to the first one, is made public. Messages created with the first key can be uniquely verified with the second key.
Public Key Infrastructure (PKI) - The set of standards and services that facilitate the use of public-key cryptography in a networked environment.
relying party - A recipient of a certificate who acts in reliance on that certificate and/or any digital signatures verified using that certificate. http://www.ietf.org/rfc/rfc3647.txt
Resource Provider (RP) - For the InCommon Federation, the term Resource Provider has been superseded by the term Service Provider.
Service Provider (SP) - Previously called the Target Site in the Shibboleth software implementation. For InCommon, an SP is a campus or other organization that makes online resources available to users based in part on information about them that it receives from other InCommon participants.
Shibboleth® - Software developed by Internet2 to enable the sharing of web resources that are subject to access controls such as user IDs and passwords. Shibboleth leverages institutional sign-on and directory systems to work among organizations by locally authenticating users and then passing information about them to the resource site to enable that site to make an informed authorization decision. The Shibboleth architecture protects privacy by letting institutions and individuals set policies that control what information about a user can be released to each destination. For more information on
Shibboleth please visit http://shibboleth.internet2.edu/uses.html.
Sponsored Partner - A business p