|
|
| (42 intermediate revisions by 6 users not shown) |
| Line 1: |
Line 1: |
| {{Fedcloud-tf:Menu}} {{Fedcloud-tf:WorkGroups:Menu}} {{TOC_right}}
| | #REDIRECT[[Federated_Cloud_Federated_AAI]] |
| | |
| <font color="red">Leader: Bjoern Hagemeier, FZJ</font>
| |
| | |
| == Collaborators ==
| |
| | |
| {| border="1"
| |
| |-
| |
| ! Role
| |
| ! Institution
| |
| ! Name
| |
| |-
| |
| | Scenario leader
| |
| | FZJ
| |
| | Bjoern Hagemeier
| |
| |-
| |
| | Collaborator
| |
| | CESNET
| |
| | Boris Parak
| |
| |}
| |
| | |
| == Scope ==
| |
| | |
| We have already defined
| |
| | |
| == Questions ==
| |
| | |
| === Type of Federation ===
| |
| | |
| Thank you David W. for mentioning the difference in the information publishing document.
| |
| | |
| Before taking any decision about the requirements for a federated AAI, one
| |
| needs to be sure what type of federation is desired. There are roughly two types
| |
| that need to be considered, which have a strong influence on how to authenticate and
| |
| authorize users.
| |
| | |
| ==== Tight federation ====
| |
| | |
| The federated cloud systems are all the same for the user. He only interacts with a single
| |
| point of entry. Consequently, there can (and probably should) be a single user database.
| |
| | |
| | |
| ==== Loose federation ====
| |
| | |
| Every user has a home organization at which he can be authenticated (identity provider).
| |
| Every service within the federation 'knows' a list of acceptable identity providers.
| |
| | |
| === VO support ===
| |
| | |
| === What's already there? ===
| |
| | |
| ==== Products ====
| |
| | |
| ===== Shibboleth =====
| |
| | |
| | |
| ===== UVOS =====
| |
| | |
| ===== VOMS =====
| |
| | |
| | |
| ==== Infrastructure ====
| |
| | |
| ===== SSO =====
| |
| | |
| * Possible integration?
| |
| | |
| | |
| == Technical details ==
| |
| | |
| === Identity providers ===
| |
| | |
| === X.509 certificates ===
| |
| | |
| === Delegation ===
| |
The wiki is deprecated and due to be decommissioned by the end of September 2022.