9–11 Oct 2018
Lisbon
Europe/Lisbon timezone

Towards the EOSC AAI service for research communities

10 Oct 2018, 12:00
1h
Auditorium JJLaginha (Lisbon)

Auditorium JJLaginha

Lisbon

ISCTE, University of Lisbon

Speakers

Chris Atherton (GÉANT) Christos Kanellopoulos (GÉANT)Mr Nicolas Liampotis (GRNET)

Description

The European Open Science Cloud (EOSC) will provide an Authentication and Authorisation Infrastructure (AAI) through which communities can gain seamless access to services and resources across disciplinary, social and geographical borders. To this end, the EOSC-hub and the GÉANT (GN4-2) project AAIs build on existing AAI services and provide a consistent, interoperable system with which communities can integrate. This session will introduce the main concepts for meeting research community needs for AAI access to EOSC. It will outline how the AARC Blueprint Architecture model (i) leverages eduGAIN to enable users to use their own home organisation credentials to access services and, (ii) underpins community AAI services in EOSC-Hub and complementary projects. By implementing policies that are harmonised and compliant with global frameworks such as the REFEDS Research and Scholarship entity category and Sirtfi, communities are supported in receiving and releasing consistent attributes, as well as in following good practices in operational security, incident response, and traceability. Complementary to this, users without an account on a federated institutional Identity Provider are still able to use social media or other external authentication providers for accessing services. Thus, access can be expanded outside the traditional user base, opening services to all user groups including researchers, people in higher-education, and members of business organisations and citizen scientists. Research communities can use the Community AAI services in EOSC-hub for managing their users and their respective roles and other authorisation-related information. At the same time, the adoption of standards and open technologies, including SAML 2.0, OpenID Connect, OAuth 2.0 and X.509v3, facilitates interoperability and integration with the existing AAIs of other e-Infrastructures and research communities. Development of these technologies has been and continues to be shaped by the requirements defined by the the users of the AAI services. With the recent publication of FIM4R version 2 and further requirements gathering work performed through the AARC2 and EOSC-hub AAI surveys, the question of how research infrastructures respond to these requirements has become a topic of significant interest for many research communities. This will be an interactive session where researchers, research infrastructures and e-infrastructures present their use-cases and more in general describe the response to the obstacles researchers face when accessing resources used in their daily work. You shouldn’t miss this if you are a researcher or representative of a scientific community interested in gaining access to EOSC federated services and resources in a secure and user-friendly way. Draft agenda: - How the EOSC AAI services help communities to access resources - Introduction of the evolved view of the AARC Blueprint Architecture - Common requirements for Federated Identity Management for Research (including findings from FIM4R version 2.0 and requirements gathering activities performed through the AARC2 and EOSC-hub AAI surveys) - Community AAI deployments and experiences - Life Science AAI

Summary

The EOSC will provide an Authentication and Authorisation Infrastructure (AAI) through which communities can gain access to services and resources across disciplinary, social and geographical borders. To this end, the EOSC-hub and the GÉANT (GN4-2) projects build on existing AAI services that follow the architectural and policy recommendations defined in AARC for providing an interoperable system with which communities can integrate. This interactive session will introduce the main concepts for meeting research community needs for access to EOSC federated resources and provide an opportunity for researchers, research infrastructures and eInfrastructures to present their use-cases and experiences.

Type of abstract World Cafe Session

Primary authors

Ann Harding (GÉANT) Chris Atherton (GÉANT) Christos Kanellopoulos (GÉANT) David Groep (NIKHEF) Diego Scardaci (EGI.eu) Klaas Wierenga (GÉANT) Licia Florio (GÉANT) Mr Nicolas Liampotis (GRNET) Pavel Weber (KIT-G)

Presentation materials