1. User Registration in the SeaDataNet V1 system by Dick M.A. Schaap – technical coordinator Oostende, June 08

2. SeaDataNet User’s portal schema V1 services for metadata Data downloading services Visualization services (WMS) for V2 Ifremer Database BODC Database BSH Database... Download managers in Data centers CSREDIOS EDMED CDI Shopping basket Requests status manager datametadata CSR CDI Project info Metadata & Data catalogues Data request Status of request General requestMetadata request Organisation + data source id Data download at BODCat BSHat MARIS + EDMERP Entry point for access hits EDMO EDIOSEDMED EDMERPEDMO Software Vocabularies StandardsCross search AAA Registr. My transact. User Register User registration

3. Authentication, Authorization and Administration Single Sign On system required for access to distributed system User’s authentication information based on personal login / password Central User Register, hosted at IFREMER Login – password to give access to: Submitting shopping basket orders by users Checking the status of shopping requests and downloading of data sets via the personal Request Status Manager by users Checking and validating the outstanding shopping requests via the Request Status Manager by Data centre managers Checking the history of data requests via the Request Status Manager by Data centre managers Login to the SeaDataNet extranet by SeaDataNet partners

4. Authentication and authorization implementation CAS Web Service user identifier, password, SDN role SDN user directory User catalogue LDAP user identifier, &full user information SeaDataNet web portal (all distributed components with controlled access) User 4 Access to controlled facilities CAS authentication form for authentication only To get user information or to get user rôle login + password Authentication

5. User log-in screen

6. User registration and registration validation process User must register in order to get one login Online request form to provide the necessary information User agrees with the “SeaDataNet User Licence” which is part of the SeaDataNet Data Policy User request form is forwarded to the SeaDataNet data centre of the country of the user The national data centre must evaluate the request and effectuate the user registration, thereby giving ‘user role(s)’ The ‘user roles’ are decisive for the authorisation process After registration, the user will receive his/her login -password by email (email check) So a Central User Register, but with decentralized management

7. User registration and registration validation process Registration Web form SDN licence agreement + User information SeaDataNet web portal 12 Validation Web form + SeaDataNet role Validation of user registration and SeaDataNet role assignment SeaDataNet user directory User SDN User Desk 3 3 Transmission by email User personal identifier (login) + password Registration request Validation NODC of the user’s country or SDN User Desk (default) User directory update

8. User Roles => See Vocabulary C866 SDNR01 AdministratorA user who is able to bypass any access control created by SeaDataNet but with no bypass rights for local access controls SDNR02 PublicAny authenticated individual with sufficient credentials to satisfy SeaDataNet access logging requirement SDNR03 AcademicA user who accesses data on the SeaDataNet network for purposes of education or bona fide non- profit academic research SDNR04 CommercialA user who accesses data on the SeaDataNet network with the objective of making a financial profit from its use SDNR05 National and local government A user who accesses data on the SeaDataNet network for administrative or legislative purposes within the boundaries of a nation. SDNR06 Pan-national government A user who accesses data on the SeaDataNet network for international administrative or legislative purposes. Generally but not exclusively the European Union in the SeaDataNet context SDNR07 PartnerA person employed by an organisation participating in SeaDataNet. This gives the right to access, create and (with ownership rights) maintain project documents and metadatabase entries.

9. 1 Registration request => Page 1 : Agreement on data license => Page 2 : User personal information

10. 1 Registration request Page 3 : Confirmation of registration request

11. => Mail sent to NODC or SeaDataNet user desk 2 Registration validation => SeaDataNet role attribution and validation

12. => A web form is available at https://www.ifremer.fr/AAARegistration/faces/UserPersonalInformation.jsp https://www.ifremer.fr/AAARegistration/faces/UserPersonalInformation.jsp 2 Change in user’s information => The e-mail address can’t be changed (because linked to user’s login and id in the central registry)

13. Action by SeaDataNet national data centres Each SeaDataNet national data centre must provide to the user desk (sdn-userdesk@seadatanet.org) at least one e-mail address, or better a list of addresses, of people in charge of SeaDataNet user registration validation for their country. Each SeaDataNet national data centre must process registration requests from users from its country.