Speaker
Description
Virtual Organization Membership Service (VOMS) servers have long been used for authentication and authorization based on X509 Proxy Certificates within scientific collaborations. However, the trend is shifting towards token-based Identity and Access Management (IAM) systems. The VOMS Attribute Authority (VOMS-AA) service seamlessly integrates with existing VOMS clients by emulating the traditional VOMS server interface while retrieving authorization data from an IAM database. This approach guarantees continued support for Virtual Organizations still reliant on VOMS after the scheduled decommissioning of the legacy VOMS and VOMS-Admin servers.
To match the reliability, fault tolerance, and ability to handle heavy workloads of the previous servers, VOMS-AA needs a geographically distributed deployment option. This contribution explores strategies for implementing VOMS-AA with geographic replication, ensuring an uninterrupted and scalable service, and presents the results of preliminary tests.
Topic | Trust and Security: Interoperability |
---|