Versions Compared

Old Version 1

changes.mady.by.user Simone Visconti

Saved on

compared with

New Version 2

changes.mady.by.user Fernando Aguilar

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Pilot Description

...

LifeWatch-ERIC is a European Infrastructure Consortium providing e-Science research facilities to scientists seeking to increase our knowledge and deepen our understanding of Biodiversity organisation and Ecosystem functions and services in order to support civil society in addressing key planetary challenges.

LifeWatch-ERIC was established as a European Research Infrastructure Consortium by the European Commission Implementing Decision (EU) 2017/499 of 17 March 2017.

During its ESFRI stage, LifeWatch was composed by different national initiatives working on different services and solutions for the research community. During this new ERIC stage, LifeWatch ERIC requires a solutions to provide access to the different services in a common way, as well as organize the different defined groups and roles. Currently, the different LifeWatch services, Virtual Laboratories and Virtual Research Environment manage their own local users, with some exceptions that allows institutional IDs. The technology behind depends on the services, but they mainly support web-based authentication, with some exceptions using, for example, HPC resources.

This pilot activity aims to identify and enhance an existing AAI solutions to be adopted by LifeWatch ERIC as IdP, integrating already existing institutional or social identities in a federated way. This IdP solution will be used for the following purposes:

  • To give access to restricted LW services. The services may be restricted because of processing power or storage demands.
  • To protect user data and scripts that are stored on the infrastructure (unix home folders etc)
  • To give access to data not yet in the public domain. (data in databases , project moratorium period )
  • To distinguish between users uploading data to the system (RvLab , eLab, data explorer)
  • To give access to openstack configuration interface and computing resources at infrastructure layer.
  • To manage roles/groups and authorize them to access specific services.

Pilot goals

Some questions to answer:

...