Employee Authentication Services

1
Employee Authentication Services

• Community Of Interest Working Group

March 25th 2009
2
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

3
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

4
Progress Update - Actions from previous COI
Update Materials on Gov Ex site complete
?

• Create EAS website complete
• http//www.dcsf.gov.uk/localauthorities/index.cfm?
  actionsubjectsubjectID16
• New DCSF website under construction website
  will be updated post April 09

?

• Amend FAQs - complete
• Question inserted on partnership working
• Question inserted on service quality

?

• Set up MC sub-group - complete
• Representation from Cornwall, Leeds and
  Hampshire, DCSF, DWP, CLG
• Input from SocITM, NWeGG, LGDC, and LGA

?

• Plan Chief Executive Communications in progress
• Draft of letter 80 complete
• Engaged with LGDC and LGA to review and comment
  on messages to Chief Exec / 151 Officer
• Engaged with LGDC, LGA, SOLACE, ADCS, NWeGG
  SocITM in order to forward key comms to members

?

• Communicate with ContactPoint contacts via LARA
  in progress
• Draft letter and supporting materials complete
  and being reviewed by ContactPoint team
• Agreement with ContactPoint to add EAS materials
  to LARA website

?
5
Progress Update RA Implementation
Salford final stage of implementation underway
estimated go live late April 2009
DCSF RA final stage of implementation underway
estimated go live April/May 2009

• Lessons learnt so far
• Advance booking of auditors for tScheme
  accreditation
• MOU2 structure under review
• Requirement to project manage against go live
  date from Day 1
• Requirement for dedicated project manager

• Support materials to be published post go
  live
• RA Suggested Project Plan
• Process definition role definition documents -
  drafts
• Detailed lessons learnt
• Revised Implementation Guide

6
Progress Update Engagement with LAs
Letter of Intent
GO LIVE
Q-Pack MOU
Implementation
Scoping
Initial Engagement
Trstd Roles Populated
Process Requirements
Training Implemented
Tokens ordered
Initial Engagement Workshop
Processes Implemented
Technical Requirements
Bulk Info Uploaded
UAT test
T-Scheme Accreditation
Readiness Assessment 1
Readiness Assessment 2
Trust Scheme Accreditation
Initial Engagement
Scoping
Implementation
Approx 100 Local Authorities engaged with EAS

• Letter of Intent from 22 Local Authorities to
  set up 8 RAs
• Salford
• Newham
• Milton Keynes
• Birmingham
• Hillingdon
• KIDS
• HIOW IMT Partnership (16 LAs)
• Wigan

Completed Q-pack from 1 local authority Salford
7
Progress update Product Development

• Sharepoint Applications
• DCSF IWP
• Newham
• Next steps
• Progress discussions with DCMS

• Regional Hub Solution
• Some regional groupings identified
• HIOW IMT Partnership received GC funding and
  submitted EAS letter of intent
• Yorkshire Humber received RIEP funding for
  EAS Regional Co-ordinator role received EAS
  engagement meeting
• London Connects EAS engagement meeting 2nd
  April
• Kent Connects EAS engagement meeting 21st
  April
• Next steps
• Formalise approach with input from COI and CLG

8
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

9
Implementation Approach achieving 100 Coverage

• CIS requires that all LAs access the system using
  EAS as the sole access route
• The current proposition delivers a different set
  of benefits to Top Tier LAs compared to Districts
  the cost-benefit case is not as strong for the
  latter
• How can we influence the key decision drivers in
  order to strengthen the proposition for districts?

10
Implementation Approach key decision drivers
Cost of EAS is in the region of 10k in a
costbenefit analysis, the decision drivers can
be boiled down to two key factors
Number of End Users
Top Tier LAs
More than 500
?
Districts
Less than 500
X
Potential for re-use (within LA and for end
users)
Top Tier LAs
Multiple Childrens Services apps plus Housing
Benefits
?
Districts
Housing and Benefits only
X
Creating Regional or Sub-regional RA hubs
improves the business case for districts by
altering the outcome of the three decision
drivers Number of end users Potential for
re-use and Cost
11
Regional Implementation Approach Progress to date

• HIOW IMT Partnership received GC funding and
  submitted EAS letter of intent
• Yorkshire Humber SocITM group received RIEP
  funding for EAS Regional Co-ordinator role
  received EAS engagement meeting
• London Connects EAS engagement meeting diarised
  2nd April
• Kent Connects EAS engagement meeting diarised
  21st April

Scotland no hubs identified and no LAs engaged
North East no regional group identified but
individual LAs engaged
Yorkshire and the Humber Region engaged through
SOCITM YH Group
North West no regional group identified but
individual LAs engaged
East Midlands no regional group identified but
sub-regional Derbyshire group identified
Wales no hubs identified and no LAs engaged
East of England no hubs identified and no LAs
engaged
West Midlands no regional group identified but
individual LAs engaged
London London Connects engaged
South East HIOW IMT Partnership submitted Letter
of Intent Kent Connects Engaged
South West no regional group identified but
individual LAs engaged sub-regional group
identified Devon
12
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

13
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

14
Breakout Sessions
We would like your help to answer three questions
Q1 Where do we need to strengthen the
proposition and how?
Q2 what is the best way to identify RA hubs and
the regional champions to lead them?
Q3 how can we support you in order to increase
the speed of the on-boarding process?

• Split into three groups each answer the
  following question
• Group 1 room C6 Q1
• Group 2 room C7 Q2
• Group 3 stay in main room Q3
• You have 40 minutes to write up your answers on
  the flip charts provided

15
Agenda

• 11.00 - 11.15 Welcome and Introductions Keith
  Holder
• 11.15 12.00 Progress Update - John Skipper
• 12.00 12.30 Implementation Approach John
  Skipper
• 12.30 13.00 Lunch
• 13.00 13.40 Break out sessions
• 13.40 14.00 Group Feedback and Close

16
Appendix
17
On-boarding process
Letter of Intent
GO LIVE
Q-Pack MOU
Initial Engagement
Implementation
Scoping
Trstd Roles Populated
Process Requirements
Training Implemented
Tokens ordered
PROCESS
Initial Engagement Workshop
Processes Implemented
Bulk Info Uploaded
Technical Requirements
UAT test
T-Scheme Accreditation
Readiness Assessment 1
Readiness Assessment 2
Trust Scheme Accreditation
Initial Engagement
Scoping
Implementation

• Registration Authority (RA) is established to
  trust scheme standards trust scheme
  accreditation achieved
• RA Trust Roles is identified and trained
• LA is linked to EAS (UAT occurs)
• Initial LA EAS users are uploaded
• Tokens are ordered and received
• Participants EAS Team, eDT, LA Technical
  Architects LA Project Managers, Trust Scheme

• Initial Workshop to discuss what EAS is,
  benefits, costs and timelines
• Participants EAS Team, LA Technical Architect
  LA Project Manager

• Scoping Workshops to help you understand the
  scope of change required to your business
  processes and technical set-up
• These workshops also help you to begin the
  process of completing the documentation needed to
  progress to implementation
• Participants EAS Team, eDT, LA Technical
  Architects LA Project Managers.

WHAT HAPPENS?

• Input
• Overview of your requirements, budget, potential
  user numbers and timelines
• EAS Initial Engagement Pack
• First look at EAS key documents for Scoping Phase

• Input
• Gap analysis - current business processes and set
  up of organisation versus EAS requirements
• EAS documents Implementation Guide, Registration
  Policies, EAS Trust Framework, HMGs minimum
  requirements for the Verification of the Identity
  of Individuals
• Output
• Implementation Plan
• Readiness Assessment 2
• Q Pack
• Memorandum of Understanding
• Bulk Upload Info

• Input
• Initial EAS users are identified for bulk upload
  of information
• Initial token numbers are supplied

INFORMATION SHARING

• Output
• Understand strategic business case and sign
  Letter of Intent to indicate an interest in using
  EAS
• Readiness Assessment 1 completed
• Named Project Manager

• Output
• Documentation to achieve trust scheme
  accreditation is completed and trust scheme
  accreditation achieved

18
EAS Proposition
Employee Authentication Services (EAS) is a
cross-Government solution that provides a
scalable, sustainable and secure two factor
authentication service. It enables local
government employees and trusted partners to
access multiple Government services through a
single authentication process and token.
PROPOSITION
Value for Money
Easy to use and scaleable
Endorsed and future-proofed
Designed in collaboration with local authorities
and other service users

• Service users can access multiple applications,
  across Government, through a single
  authentication process and token

• Endorsed and security accredited as a core
  government asset
• Recommended by the LGA Local Government Data
  Handling Guidelines
• Recommended by BECTA as a solution to achieve
  compliance with the spirit of the Cabinet Office
  Report Data Handling Procedures in Government
• Clear product development plan - local apps,
  remote access to GCSx and regional hub
  configuration

• Not-for-profit service
• Re-uses an existing Government asset
• Leverages government buying power (token
  support cost of 19 compared to average cost of
  45 - 75, implementation cost 10k, compared to
  typical implementation costs starting from 60k)

• Up to thirty local authorities, five third sector
  organisations and six Government departments
  involved in developing the service
• Involvement of local authority organisations such
  as SocITM, LeGSB LGA and BECTA
• A cross-Government project delivered through a
  DCSF-led strategic partnership supported by CLG,
  DWP and local authorities.

BENEFITS TO SERVICE USERS
19
The Case for EAS

• You will need to implement EAS at some stage
• Sole access route for CIS (DWP)
• Sole access route for IWP and Collect (DCSF)
• Strategic route for ContactPoint (and eCAF? -
  tbc) (DCSF)
• Access to CLG Data Interchange Hub
• Discussions in place with 14 applications across
  6 Departments
• EAS is a strategic, long-term solution
• A re-usable, future proofed, pan-Government asset
• One token, multiple applications
• A corporate solution with formal accreditation to
  minimum set of standards
• Moving now maximises the subsidy available
• Over 500,000 tokens subsidised by central
  Government
• RIEP funding for regional solutions
• Other potential funding for hub solutions
• EAS will deliver local and regional benefits
• Minimum cost for remote access is part of the EAS
  future vision
• Enabler for regional shared services