The most recent versions of Bedework have new capabilities and features, such as the calendar widget and feed builder, a CardDAV server for location and contact information, new front-end caching for greater performance and scalability, greatly improved support for languages other than English, and a new default theme. In this hands-on session, you exploit and customize these features for your own Bedework installation. A Bedework image will be provided for you to install on your laptop.

This seminar is a basic hands-on introduction to uPortal the latest uPortal release (expected to be uPortal 3.2 at the time of the conference). Participants will: deploy uPortal into a Tomcat servlet container, configure its embedded CAS server for authentication, install an additional skin, add a user attribute source, configure a group store, install JSR-168 portlet, define a layout fragment, and other activities aligned with getting started with uPortal. Participants will need to provide a working laptop computer with wireless Internet access, CD-ROM drive, and a USB port (both for loading course materials).

uPortal 3 has been with us since April 2008 – almost two years. Since then Jasig has put out several patch releases of 3.0, a couple releases of 3.1, and is nearing completion of its 3.2 release. There are now dozens of schools and organizations running uPortal 3 portals. This seminar is designed for those who are currently running versions of uPortal 2 and would like to migrate to uPortal 3, and for those who are running earlier versions of uPortal 3 and would like to upgrade to the latest. We will cover several important topics: Changes to the database schema, and how to deal with them using the Import/Export tools Spring dependency injection and changes to configuration since uPortal 2 Changes to uPortal's build system, especially Maven 2 Universality: uPortal's flexible new theme This seminar will help you plan your upgrade, familiarize yourself with emerging uPortal features and practices, and make effective use of tools both uPortal-based (e.g. Import/Export) and external (e.g. SCM and Maven).

Learn how to build dynamic JavaScript user interfaces using the jQuery toolkit. This workshop will walk you through the techniques of using jQuery to do DOM manipulation, event handling, and AJAX communication within the browser. We will also cover the use of jQuery plugins and UI widgets. This workshop assumes some familiarity with programming and HTML/CSS. A refresher on the JavaScript language, along with guidance on how to write portal-friendly code, will be provided. This workshop also serves as a good foundation for the 'Cooking with Infusion' session, which will cover in-depth application development techniques with JavaScript, jQuery, and Fluid Infusion.

This session will teach Web developers how to use the Fluid Infusion application framework to create compelling, flexible, and portal-friendly client-side user interfaces. Built on top of jQuery, Infusion provides developers with useful tools for creating rich user interfaces in a way that avoids the spaghetti code and hard-baked assumptions that plague most large applications written in JavaScript. Built with portals, mashups, and content management systems in mind, Infusion includes tools that ensure your code will play nice when deployed inside uPortal. This session will teach the various features of the Infusion framework and component library, and will share techniques and best practices used by the Fluid community to create experiences that are accessible and flexible across a range of platforms and devices. Some knowledge of Web development and JavaScript programming is assumed.

This session has the following sections: 1. Implementing CAS 3.x to facilitate enterprise single sign-on * Introduction to CAS, CAS Protocol, and Proxy CAS * Maven2 build * Maven2 overlay build (recommended) * How to customize the login screen * Replacing the "dummy" authentication handler with LDAP 2. CAS-enabling Web applications * uPortal (it's already done, but many questions come up about not running both on the same server) * Sample Tomcat application (Tomcat's Manager app) * Using uPortal's Web Proxy to authenticate via Proxy CAS to the Tomcat Manager app 3. Advanced topics * Clustering * Service registry * Single sign-out

Imagine this: Bi-weekly payroll batch jobs are driving when employees can get NetIds; NetId creation is tied to random UNIX machines that no one logs into; No one knows what to do when an individual collaborator wants access to a Sakai course. Do any of these sound familiar? If so, your institution may be ready to start re-evaluating your Identity Management Architecture. This seminar walks you through the basics of the process of moving from an ad-hoc structure to a more planned architecture using various Jasig institutions as case studies. Along the way, we'll look at solutions in the open source area that are starting to address the needs of the higher education community as they move to a more mature architecture.

Topics to be covered include:

• Internet2's middleware model
• Mapping of leading open source & commercial products to the Internet2 model
• Terminology that works in technical & management paradigms
• Governance
• InCommon Silver assessment framework and Levels of Assurance
• Creating an Identity Management roadmap for your institution

Developing JSR 286 Portlets The next major release of uPortal will support the latest Portlet specification, JSR 286. Being prepared to take advantage of this new specification will be important to many universities that have long development cycles. The JSR 286 specification gives developers significant new tools to develop even more powerful portlets. Among the most important features is the inclusion of some AJAX support. However, even minor changes like portlet caching based on key, will be important to consider in Portlet development. This seminar will explain the changes in the new JSR 286 Portlet 2.0 specification and show code samples of these changes. Participants will learn how to create a development environment to support JSR 286 development. Seminar participants will have the opportunity to modify and write JSR 286 code. The workshop portion of this seminar will focus on enabling developers to create and run JSR 286 compliant portlets with tools they can utilize right now. The seminar will also explain what changes developers will need to make to transition their code from their development environment to the next release of uPortal. JSR 286 features that will be covered in this seminar include: * Portlet Events * Public Render Parameters * Resource Serving (including AJAX) * Portlet Filters * Portlet Caching * Cookies, HTTP Headers, and HTML HEAD element support

Groovy is an agile, dynamic language for the Java platform. It's syntax is based on Java, but adds powerful new features like closures, dynamic typing, and language-level support for lists, maps, & regular expressions. Groovy's tight affinity with Java allows Java developers to learn and use it with little effort. Code written in Groovy compiles to standard Java bytecode, so it seamlessly integrates with existing Java APIs and you can use it anywhere you can use Java. This seminar is a general introduction to Groovy aimed at Java developers who are new to Groovy. The content is hands-on, and touches the following topics:

- Why Groovy?
- Differences from Java syntax
- Closures
- Regular Expressions
- Collections
- The "as" operator
- The MetaClass
- Unit testing in Groovy
- Groovy Console & Groovy Shell
- Frameworks & technologies based on Groovy

This session will provide developers with a hands-on understanding of mobile development techniques in the portal environment. We'll cover: - Creating and modifying mobile themes in uPortal - Developing mobile interfaces for portlets - Providing different user experiences based on device type - Addressing performance and compatibility issues unique to mobile devices - Re-purposing existing content for use on small screens - Using Fluid Infusion and the mobile Fluid Skinning System to create great user experiences

The purpose of this seminar is to learn what the most common web application security flaws are, how to test an application to find them and how the security flaws can be fixed. We will walk through each of the following top ten vulnerabilities in web applications:

1. Injection
2. Cross Site Scripting (XSS)
3. Broken Authentication and Session Management
4. Insecure Direct Object References
5. Cross Site Request Forgery (CSRF)
6. Security Misconfiguration
7. Failure to Restrict URL Access
8. Unvalidated Redirects and Forwards
9. Insecure Cryptographic Storage
10. Insufficient Transport Layer Protection Students will get a hands on approach to test a vulnerable web application for these flaws and then learn how to utilize the latest Enterprise Security API to fix them.