General Flow of a Moonshot deployment

This flowchart illustrates a general flow of a Moonshot deployment in an organisation.

Your first step should be to download the Live DVD. It allows you to simply run an all-in-one system that is pre-configured for you.

Get Started Using the Live DVD

Your second step is to deploy a basic pilot system. A good start is to use three virtual machines: an IdP, an RP Proxy and a client.

Deploy an Identity Provider

Deploy a Relying Party Proxy

Deploy a Moonshot Client

Your third step is to deploy a basic service or two and connect them to the RP Proxy. We recommend the SSH server to start.

Now you are ready to test Moonshot with your client.

Enable Moonshot on a Server

Once your pilot system is functional and running, consider joining the Moonshot Test Network to continue testing your services with others.

Once you can demonstrate how it works to your management, join your local Trust Router network.

As of March 2015, there is one Trust Router network available: Jisc Assent.

Contact Jisc or your local national research and education network operator (NREN) for further information.

After joining the Trust Router network, you must configure your pilot system to use the Trust Router network.

This involves re-configuring several settings in both the FreeRADIUS configuration and the Temporary ID service (TIDS) on your IdP and RP Proxy servers.

You must also adjust your organisation's settings in your local Trust Router management portal, details of which your Trust Router network operator will have provided you.

Re-test your services with either a test identity that your local Trust Router network operator provided you with, or a test identity from another organisation in your local Trust Router network.

You should also arrange to test your IdP with basic services provided by other organisations, or your local Trust Router network operator.

Once your tests are completed successfully, you can consider deploying a production system.