{"id":22257,"date":"2020-03-13T10:35:57","date_gmt":"2020-03-13T01:35:57","guid":{"rendered":"https:\/\/www.prime-strategy.co.jp\/?post_type=achievements&p=22257"},"modified":"2023-01-11T00:08:57","modified_gmt":"2023-01-10T15:08:57","slug":"nanolsi_kanazawa-u_shibboleth","status":"publish","type":"achievements","link":"https:\/\/www.prime-strategy.co.jp\/en\/achievements\/nanolsi_kanazawa-u_shibboleth\/","title":{"rendered":"National University Corporation – Kanazawa University"},"content":{"rendered":"

Customer Information<\/h2>\n

National University Corporation Kanazawa University Kanazawa University Nano Life Science Institute Administration Office<\/span><\/strong>
\nKanezawa University Nano Life Science Institute (NanoLSI) was founded in 2017 after the university\u2019s concept was chosen by the Ministry of Education\u2019s Word Premier International Research Center Program (WPI).
\nThrough the use of state-of-the-art scanning probe microscope technology, they have been able to \u201csee\u201d biological phenomena that have not been seen before, from the creation and growth of life to the mechanism of diseases, such as cancer, aging, and are advancing the research into the mysteries of life.<\/p>\n

Contact persons:
\nTetsuya Inoshima (Kanazawa University Information Department, Information and Computerization Promotion Section)
\nYuri Kadota (Kanazawa University Nano Life Science Institute Administration Office<\/span>, Public Relations and Business Planning Group)<\/p>\n

Development Partner<\/h2>\n
\"SIOS\u69d8\"
Contact person: Kentaro Morone (Sios Technology, Inc. 2nd Business Group Technology Division 1 OSS & Cloud Integration Group)<\/figcaption><\/figure>\n

Sios Technology, Inc.<\/a><\/strong>
\nSios Technology offers services centered around open source software such as Linux, including the development, sales and support of software products, developing custom information systems on commission, building system infrastructure, and support.
\nIt has performed integration services, centered on authentication infrastructure, for over 150 universities and higher education institutions thus far.<\/p>\n

Target Site<\/h2>\n
\n
\"Kanazawa
Kanazawa University Nano Life Science Institute<\/figcaption><\/figure>\n
\n

Kanazawa University Nano Life Science Institute<\/span><\/strong><\/a><\/p>\n

Kanazawa University Nano Life Science Research Institute widely publishes the activities and research results of the Nano Life Research Institute to the university and general public.
\nHowever, there were multiple pages that needed to be restricted to on-campus access. This was done using their CMS (WordPress) basic password feature, but having to regularly set the password was was inconvenient.
\nIn order to fix this situation, they enabled Single Sign-On authentication with their existing on-campus Shibboleth (\u201cKanezawa University Integrated Authentication System\u201d).<\/p>\n<\/div>\n<\/div>\n

Shibboleth Authentication on nginx – an achievement with little precedent<\/h2>\n

Maintaining performance was one of the challenges posed by implementing Shibboleth Authentication.<\/p>\n

They wanted to keep the KUSANAGI and nginx environment they already had, which solved their page loading issues during grade postings on the official university site<\/a>. Unfortunately, there were few prior examples of Shibboleth being used on nginx.<\/p>\n

To achieve this, the university decided on a joint development project between Sios Technology, with a long track record in authentication system integration, and Prime Strategy, the developer of KUSANAGI.<\/p>\n

\"How
How single sign-on with Shibboleth works<\/figcaption><\/figure>\n

Challenges with building the site<\/h2>\n

Implementing Shibboleth on part of site currently in use presented a structural challenge.<\/p>\n

With WordPress, since images are uploaded to one specific directory, there was a concern that a protected page\u2019s images might be made public if one could not tell which images belong to which page.<\/p>\n

In addition, some of the pages for staff were public and some were private.
\nThis problem was solved by creating a new WordPress specifically for authentication, and dividing traffic by URL.<\/p>\n

Migrating the operationally complex research library site to WordPress<\/h2>\n
\"\uff08Right:
\uff08Right: Prime Strategy CEO Kengyu Nakamura, Left: Prime Strategy Director, CMO Yachiyo Nishimaki\uff09<\/figcaption><\/figure>\n

The Nano Life Research Institution was also running an \u201cIntegrated Research Promotion Library\u201d site using Shibboleth.<\/p>\n

They were updating the site by importing CSV files.<\/p>\n

Publications were put into a list, without proper categorization or searchability. This posed a problem for both management and usability, so the university decided to migrate this site to WordPress in addition to their Shibboleth project.<\/p>\n

 <\/p>\n

A few words from the related parties<\/h2>\n

Successfully achieved both speedy viewing and an easy-to-use administrator panel (Kanazawa University)<\/h3>\n

By implementing Shibboleth without changing the current environment, we were able to maintain the site\u2019s high performance level. Now that we are also free of password-related complications, we plan to continue to build out our restricted pages in the future.<\/p>\n

In addition, our Integrated Research Promotion Library site is not only easier to update, but also with things like being able to search for documents, user convenience has improved as well.<\/p>\n

Integrating Academic Access Management Federation with WordPress – a novel idea (Sios Technology)<\/h3>\n

Integrating authentication still has many challenges due to the diversity of the field.
\nSios Technology has been implementing Academic Access Management Federation and Shibboleth Authentication in many universities.<\/p>\n

We see many universities that also manage their own proprietary web content, so when we were offered the opportunity to do authentication with the industry-leading CMS WordPress, we thought it was a great idea. I was glad to be able to take on this challenge myself, and as a result grow and contribute to others as well.<\/p>\n

KUSANAGI\u2019s evolution through joint development (Prime Strategy)<\/h3>\n

Thanks to our client Kanazawa University, whose site we manage, and the cooperation of our partner Sios Technology, we were able to develop KUSANAGI Shibboleth Authentication on nginx. There have not been many successes with this technology in the world yet.<\/p>\n

It would not be an exaggeration to say that Shibboleth is the de facto standard Single Sign-On platform for education sites. In the future, we would like to help solve issues for customers who want to use Shibboleth Authentication while maintaining focus on the performance of their site.<\/p>\n

\"\uff08Right:
\uff08Left: Prime Strategy CEO Kengyu Nakamura, Right: Prime Strategy Director, CMO Yachiyo Nishimaki\uff09<\/figcaption><\/figure>\n

Appendix \/ Explanation<\/h2>\n

Shibboleth Authentication<\/h3>\n

In order to use Single Sign-On with Shibboleth Authentication, it is necessary to have both an IdP (ID Provider) set up by an Academic Authorization Federation participant (such as a university), and an on-campus web service \u201cSP\u201d (Service Provider). In the past, setting up an SP was a difficult technical challenge. Even if an IdP was successfully present, connecting to an internal web service would require a professional developer.<\/p>\n

It can be used by migrating the site to KUSANAGI Business Edition.<\/p>\n

KUSANAGI Business Edition<\/h3>\n

KUSANAGI Business Edition<\/a> is a business-oriented version of the ultra-fast virtual machine KUSANAGI.
\nIn addition to KUSANAGI\u2019s standard features, it has these additional merits:<\/p>\n