USDA eAuthentication Service Update

1

• USDA eAuthentication Service Update
• NFC Forum
• eGovernment Program

2
What is the USDA eAuthentication Service?

• Definition Authentication is the process of
  determining whether someone or something is, in
  fact, who or what it is declared to be.
• Definition Authorization is the process of
  allowing a user to perform specific tasks within
  an application.
• The USDA eAuthentication Service is the
  Department of Agriculture's centralized solution
  for providing employees and customers access to
  USDA web-based applications. 
• The USDA eAuthentication Service currently
  provides site protection for over 100 USDA
  applications.
• Explaining OMBs four (4) Assurance Level
  Credentials
• Level 1 and 2 Pin/Password and
• Level 3 and 4 Public Key Infrastructure.

3
(No Transcript)
4
(No Transcript)
5
USDA eAuthentication Service
Planning
Technology
People
Processes
6
USDA eAuthentication Service Quick Overview

• CA Authority to Operate issued in 10/2003
• USDA eAuthentication Service live in 10/2003
• GSA level 2 credential approval 1/2004
• Employee Registration implemented 7/2004
  10/2004
• August 2004 Statistics
• Users 72,000
• 44,000 employees
• 28,000 customers
• Applications 100
• Logins gt600,000 per month

May, 2004
USDA eAuthentication Service External Users
7
Agency Application Integration Process
Application Go-Live
Pre-Design
Funding

• Designate application contacts and owners for
  integration
• Introduce Application Integration Form complete
  this form after pre-design with eAuth support
  available to answer questions /give suggestions
• Set up Design meeting with eAuth team

• Complete Application Integration Form
• Initiate setup of development environment to
  integrate with USDA eAuthentication Service

• Build Meetings (eAuth team helps integrate on an
  as needed basis)
• Integrate development, Pre-Production and
  Production Environments
• Test each environment before moving on

• Cert only needed if creating a custom
  LRA process
• Work with eAuthentication team to create and
  certify any LRA processes or procedures needed
• Identify, register and train new LRAs using LRA
  Training application

• Review eAuth Guidebook
• Determine interactions to be hosted in new
  application
• Complete Impact Profile Assessment for each
  interaction to be hosted in application
• Set up Pre-Design meeting with eAuth team

• Complete Funding form
• Discuss funding with agency CIO
• Transfer funding

8
Some eAuthentication Metrics
9
USDAs eAuthentication Next Steps

• Integration of NFC certificates
• NFC offers three types of PKI certificates
  Roaming, Desktop, and Smartcard.
• Integration with Credentialing
• Integration with Site Protection
• Integration with Employee Identity Mgmt System
• New project ripple changes, authoritative data
  sources timely data consumption
• Integration with Federal Governments eAuth
  Federation
• Testing mostly complete
• Move to operational in FY 05

USDA User (Employee or Customer)
10
Questions and Answers

• Phone [phone]
• Email egov_at_usda.gov