19–23 Sept 2011
Lyon Conference Centre
Europe/Amsterdam timezone

Gridcertlib - From Shibboleth authentication to X.509 certificates

20 Sept 2011, 15:15
15m
Rhone 3 (Lyon Conference Centre)

Rhone 3

Lyon Conference Centre

Lyon Conference Centre, Lyon, France

Speaker

sergio maffioletti (UZH)

Description

GridCertLib is a Java library providing services to create a SLCS/X.509 certificate and a Grid proxy (optionally VOMS-enabled), given the SAML2 assertion resulting from a Shibboleth2 authentication. The library comes with some example servlets (cf. package.swing.gridcertlib.servlet) that provide sample code to use the GridCertLib features in a Java web services environment. The main use case envisioned for GridCertLib is to provide seamless and secure access to Grid/X.509 certificates and proxies in web portals: when a user logs in to the portal using the regular SWITCHaai Shibboleth authentication, GridCertLib can automatically obtain a Grid X.509 certificate from the SLCS service and generate a VOMS proxy from it. What is more, all of this can happen without further interaction with the user.

Presentation materials