{"id":854,"date":"2016-03-14T14:29:24","date_gmt":"2016-03-14T13:29:24","guid":{"rendered":"https:\/\/wpethzprd.ethz.ch\/its\/?p=854"},"modified":"2016-03-14T14:29:24","modified_gmt":"2016-03-14T13:29:24","slug":"web-login-simple-and-secure","status":"publish","type":"post","link":"https:\/\/blogs.ethz.ch\/its\/2016\/03\/14\/web-login-simple-and-secure\/","title":{"rendered":"Web login &#8211; simple and secure"},"content":{"rendered":"<p>At ETH Zurich, &#171;uApprove&#187;, a new Shibboleth version, is used to log in.<!--more--><\/p>\n<p>In the past, you already had to provide a username and password to access various applications at ETH Zurich, such as eDoz, myStudies and blogs.ethz.ch. This procedure has remained the same from the outside, but the login screen and the technology in the background have changed.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/blogs.ethz.ch\/id\/files\/2016\/03\/Shibboleth_Post.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-9959\" src=\"https:\/\/blogs.ethz.ch\/id\/files\/2016\/03\/Shibboleth_Post-300x157.jpg\" alt=\"Shibboleth Einloggen im ETH Weblog\" width=\"300\" height=\"157\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<h2>Reason for the change<\/h2>\n<p>IT Services have renewed the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Shibboleth_(Internet2)\" target=\"_blank\">Shibboleth<\/a> and LDAP infrastructure at ETH Zurich: with regard to the Shibboleth infrastructure, the new <a href=\"https:\/\/www.switch.ch\/aai\/support\/tools\/uapprove\/\" target=\"_blank\">uApprove<\/a> module has been implemented, among other things. uApprove increases transparency. ETH users who are logging in will now see which attributes of the application are passed on. Furthermore, the new version is a prerequisite for registering with eduGAIN Interfederation (<a href=\"https:\/\/en.wikipedia.org\/wiki\/EduGAIN\" target=\"_blank\">Wikipedia eduGAIN<\/a>) at ETH Zurich. After logging in, the login and confirmation no longer need to be entered again for each application. At ETH Zurich, the following areas and services use Shibboleth: IT Services, the ETH library, LET; Digitec and Brack (for replacements and orders at ETH Zurich).<\/p>\n<h2>More information and transparency with &#171;uApprove&#187;<\/h2>\n<ul>\n<li>ETH users must read and accept the &#171;Terms and Conditions&#187; (once only)<\/li>\n<li>Users receive more information about the application<\/li>\n<li>Users see which attributes the application will receive and can cancel the login (if they do not agree with them)<\/li>\n<li>&#171;uApprove&#187; is the prerequisite for registering with &#171;eduGAIN Interfederation&#187; at ETH Zurich<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/blogs.ethz.ch\/id\/files\/2016\/03\/Shibboleth_Post_2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-9960\" src=\"https:\/\/blogs.ethz.ch\/id\/files\/2016\/03\/Shibboleth_Post_2-300x185.jpg\" alt=\"Shibboleth: Informationen, die weitergegeben werden\" width=\"300\" height=\"185\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<h2>nethz \u00d4\u00c7\u00f6 authentication and authorisation at ETH<\/h2>\n<p>&#171;<a href=\"https:\/\/www1.ethz.ch\/id\/services\/list\/nethz_db\/index_EN\" target=\"_blank\">nethz<\/a>&#187; refers to the central authentication and authorisation infrastructure at ETH, which governs access to basic IT services at ETH: access to the ETH network via VPN or wireless LAN, email, central storage space on the NAS and access to the computers in the public computer rooms for students. An increasing number of electronic services of ETH require the &#171;nethz password&#187; and check the access permissions in the nethz database.<\/p>\n<p>During authentication, the identity of the person logging in is checked and their credentials (e.g. user name and password) are verified. If user authentication was successful, the system provides authorisation. Authorisation is a technical process, which enables the person to carry out specific actions.<\/p>\n<h2>AAI and SWITCH<\/h2>\n<p>AAI stands for Authentication and Authorization Infrastructure. This infrastructure simplifies access to web resources within the Swiss university community. In the past, university employees and students needed additional digital identities for other universities, but now they only need one. The AAI login (referred to as the nethz login at ETH) is also your passepartout for nearly all web resources, which Swiss universities and associated organisations make available to their users. The persons responsible for the web resources decide which web resources can be accessed by which identities.<\/p>\n<ul>\n<li>SWITCHaai: <a href=\"https:\/\/www.switch.ch\/services\/aai\/\" target=\"_blank\">the academic passepartout<\/a><\/li>\n<li>SWITCH <a href=\"https:\/\/www.switch.ch\/aai\/support\/faq\/\" target=\"_blank\">FAQ<\/a><\/li>\n<li>SWITCHaai <a href=\"https:\/\/www.switch.ch\/aai\/support\/documents\/interfederation\/\" target=\"_blank\">Interfederation and eduGAIN<\/a><\/li>\n<\/ul>\n<h2>More in the ITS Blog<\/h2>\n<ul>\n<li>New Design for Login Page (<a href=\"https:\/\/blogs.ethz.ch\/its\/2014\/08\/26\/new-design-for-login-page\/\" target=\"_blank\">ITS Blog<\/a>)<\/li>\n<li>Single sign-on \/ SWITCHaai \/ Shibboleth (<a href=\"https:\/\/blogs.ethz.ch\/id\/2012\/04\/23\/single-sign-on-switchaai-shibboleth-2\/\" target=\"_blank\">ITS Blog<\/a>)<\/li>\n<li>Single sign-on at ETH (<a href=\"https:\/\/blogs.ethz.ch\/id\/2011\/10\/18\/single-sign-on-at-eth\/\" target=\"_blank\">ITS Blog<\/a>)<\/li>\n<\/ul>\n<h2>Contact<\/h2>\n<p>Please contact the <a href=\"https:\/\/www1.ethz.ch\/id\/servicedesk\/index_EN\" target=\"_blank\">ITS Service Desk<\/a> if you have any questions.<\/p>\n<p>&nbsp;<\/p>\n<p><em>(External translation service)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>At ETH Zurich, &#171;uApprove&#187;, a new Shibboleth version, is used to log in.<\/p>\n","protected":false},"author":838,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[46761,185811,185812,179866,179865,1378,2770,46790,1767,46789,179863,185805],"class_list":["post-854","post","type-post","status-publish","format-standard","hentry","category-news","tag-aai","tag-authentication","tag-authorisation","tag-edugain","tag-edugain-interfederation","tag-nethz","tag-shibboleth","tag-single-sign-on","tag-switch","tag-switchaai","tag-uapprove","tag-web-login"],"_links":{"self":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/users\/838"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/comments?post=854"}],"version-history":[{"count":0,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/854\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/media?parent=854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/categories?post=854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/tags?post=854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}