Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This deliverable should capture 

Working docs

Google-Doc: https://docs.google.com/document/d/1ofgSoUXI-CXO5Mqgpm-6bs_cejSdWm_wUAFcsEwbgm8


Notes for potential input:

...

  • JWT Shared Profile for WLCG
    Authors: M Martinez Pedreira, M Litmaath, P Millar, A Ceccanti, M Sallé, B Bockelman, H Short
    https://docs.google.com/document/d/1XQvh2dxDivUstjQaS3K6tkpLyvXlEOR4QU8YtTzDqg4/edit?usp=sharing
    Notes:
    • use it as a state-of-the-art analysis of currently used token-related authorisation model
    • extract a shared JWT profile that is interoperable across infrastructures; this doc is already aiming for a WLCG JWT profile but I don’t know if this would cover the authorisation needs of other research communities so perhaps we need to come up with a more generic shared AARC JWT interoperable profile.
    • JWT is relevant for OIDC/OAuth2 relying parties. So this doc could be used as the basis for describing the token based authorisation scheme we’re looking for in AARC since there are already real use cases for it
      (while XACML is a bit exotic - at least according to my understanding).

  • The drafty text of AARC2-JRA1.2A
    Guidelines for scalable authorisation across multi-SP environments
    https://docs.google.com/document/d/17BaAp8OBUo9V3Z4iDYxfckzrEFwdIBfBrkOebp6VSIg/edit#heading=h.1cjulk67kv2d





Meetings schedule and Minutes

DateLocationAgendaMinutes

2018-01-30 10:00 (CET)


https://www.nikhef.nl/grid/video/?m=aarcjra1Document Kickoff

Marcus will circulate the initial ToC on Wednesday