eGovernment Working Group Meeting

1

• eGovernment Working Group Meeting
• Chris Niedermayer, USDA eGovernment Executive

2
Agenda

• Welcome
• WebCAAF Overview
• Enablers Next Steps
• QA
• Next Steps and Wrap-up

3
WebCAAF Presentation (Web-Based Centralized
Authentication Authorization Facility) Owen
Unangst, USDA-NRCS, Associate CIO for eGovernment
4
Agenda

• WebCAAF History
• Some Definitions
• eAuthentication The Business Steps
• WebCAAF Addressing the Business Steps

5
WebCAAF HistoryService Center Agencies (SCAs)

• Strategic Business Decision - Move to eGov FY 01
• eAuthentication Requirements Winter, 2001
• Market Survey Winter, 2001
• Product Short List Spring, 2001
• Live Test Demo Summer, 2001
• Procure Netegrity SiteMinder December, 2001
• Stand Up WebCAAF in FC, KC StL March, 2002
• Continue to Operate for SCAs Current
• 45,000 employees
• Almost 4,000 customers
• lt 100 Contractors/Affiliates
• Risk Assessment IATO April, 2003
• Final Certification Accreditation Sept, 2003

6
WebCAAF Some Definitions

• WebCAAF ? Web-Based Centralized Authentication
  Authorization Facility
• Performs very good Authentication Services
• Performs very good Authorization Services (or
  this can be in Application)
• Can perform part of Electronic Signature (in
  concert with Application)
• Authentication ? establishing a persons
  identity, based on the reliability of the
  credentials he or she offers (this person is Joe)
• Authorization ? what actions a person, at a
  certain level of assurance, is permitted to do
  (Joe has access to )
• Electronic Signature ? authentication of a person
  conducting a transaction as well as protection of
  the transactions data (Joe did sign the contract
  and the contract did say )

7
eAuthentication The Business Steps

• Identity Proofing
• Issuance of a Credential
• Management and Use of a Credential
• Record Keeping
• Auditing

8
WebCAAF Addressing the Business Steps
9
WebCAAF Current Implementation
10
Explaining USDA Internet Gateways (6)
Layer 2
Internet Intranet
Layer 2
U S D A B A C K B O N E
R1
R1
Local
Network
11
Kansas City, Fort Collins St. Louis Web Farms
12
Details of the Web Farms
13
Using WebCAAF - Options
Option 1 Keep your Service _at_ Current Location
VPN to WebCAAF
T1 Line
Option 2 Put your Service in Web Farm Direct
Connect WebCAAF
One Condition Web Farm Stack AND WebCAAF
Components Are Necessary For WebCAAF
Operations (You can put your service anywhere,
But WebCAAF Service Must be in a Web Farm
Environment)
14
WebCAAF Redundancy Failover
15
User Registration Concept of Operations
16
WebCAAF Costs
Policy Servers 6000 ea LDAP Servers 6000
ea SiteMinder Licenses 1.22 / user SiteMinder
Maint. 0.19 / user Special Support 250 /
hr. Training (basic, Adv.) 22,000 /
class IdentityMinder 0.40 / user Support
Services LDAP 180k/yr SiteMinder 180k/yr App.
Asst. 180k/yr
5 Year Contract Initial Buy 150,000
Licenses Subsequent Buys 100,000 or more
17
Wrap Up
Confused? Considerable Details Were Not
Discussed Here The Concepts are Easy Licensing
is Cheap Technical Assistance is Expensive A
Dedicated Agency Project Lead is
Essential Leveraging Current Implementation is
Do-able Registration ConOps Application May be
the Hardest Job Binding WebCAAF to Applications
requires Smart People ? Dont put anyone on
this who doesnt like new technical challenges ?
18
Agenda

• Welcome
• WebCAAF Overview
• Enablers Next Steps
• QA
• Next Steps and Wrap-up

19
Enablers Next Steps

• The Enablers are now beginning pre-implementation
  tasks.
• Each of the three initiatives will be discussed
  in two memos from the CIO to agency heads (the
  memo for eAuthentication has already been sent
  details on next slide).
• The immediate next steps over the next two
  weeks are
• Approach meetings for all three initiatives (for
  agency representatives)
• eAuthentication
• Assemble eAuthentication project team (discussed
  in more detail on next slide)
• Agency 1-on-1 requirements meetings
• eLearning
• Assemble/round out team
• Content review meeting on May 5
• eDeployment
• Assemble team
• Background meetings for Content Management,
  Document Management, Portal Services, and Web
  Presence/USDA.gov
• Details and logistics on all these meetings will
  be provided shortly
• In all meetings, an agency decision-maker, the
  CIO, and the EGWG member or other appropriate
  subject matter expert should be involved.

20
Proposed Agency Governance Structures
Illustrative
Supporting Staff
21
eAuthentication Memo

• A memo was sent April 24 to agency heads by the
  CIO (see handout). It stressed the priority of
  eAuthentication and the need to have a solution
  in place by October to meet GPEA deadlines.
• The memo outlines several next steps for
  eAuthentication
• Assembling project teams, including
  representatives from all agencies
• Matching agency requirements to an authentication
  method (based on the risks involved and level of
  assurance required, as defined through the
  Integrated eGovernment Reporting Process)
• Matching authentication method to enterprise
  solution (e.g., WebCAAF and the GSA Gateway) and
• Design, development, and implementation.
• To begin these steps, the memo asked agency heads
  to
• Forward the name of a senior staff member who
  will represent the agency on the eAuthentication
  team to the eGovernment Team by Friday, May 2
  this person will serve as the official agency
  decision-maker for the initiative.
• Make FY 2003 funds available to support the
  design and implementation of authentication
  services needed to meet agency requirements,
  including costs for integrating the selected
  authentication method with agency applications.

22
Agenda

• Welcome
• WebCAAF Overview
• Enablers Next Steps
• QA
• Next Steps and Wrap-up

23
Questions and Answers
24
Agenda

• Welcome
• WebCAAF Overview
• Enablers Next Steps
• QA
• Next Steps and Wrap-up

25
Next Steps

• Many Enablers meetings coming up soon. Details
  will be sent shortly watch your e-mail.
• Follow up to ensure that your agency appoints an
  eAuthentication lead and decision-maker by the
  Friday deadline.
• Timely participation is crucial, as we must work
  quickly to ensure that a solution is available in
  time to meet Octobers GPEA deadline.
• ASAP Schedule your agencys Integrated
  eGovernment Meeting with Nancy Sternberg at
  720-6746.
• Send Newsletter ideas/topics to egov_at_usda.gov.
• Next EGWG meeting will be on May 14 in room
  S-107.
• Upcoming meetings include Science.gov,
  eRulemaking, and enablers project updates.