1. Identity and Certificates
Technical Evo
7/7/2017

2. Brief “Certificates behind the scenes” AARC Project Pilots
OAUTH, OIDC, SAML (Shibboleth)
AARC Project Pilots
Blueprint Arch., IdPs, Master Portals, Token Trans.
Web-based (x.509) access to services
Non-web pilots coming (AARC2)
07/07/2017

3. AARC Blueprint https://aarc-project.eu/blueprint-architecture/
07/07/2017

4. CILogon pilot - AARC
07/07/2017

5. 1. Web portal
Imagine this is a VO web portal …
07/07/2017

6. 2. Select Identity provider
…because STFC doesn’t (yet) release all the required attributes  
07/07/2017

7. 3.1 Personal data release
Identity provider asks permission to release personal data to the online Certificate Authority
oid’s from certificate - UK CA Policy with
IGTF “classic” identity validation for a
Natural Person
07/07/2017

8. 3.2 Personal data release
Certificate Authority asks permission to release personal data to the Master Portal
07/07/2017

9. 3.3 Personal data release
07/07/2017

10. 4 Delegated proxy
07/07/2017

11. Demo
07/07/2017

12. 6. Access the service
07/07/2017

13. CILogon pilot - AARC
07/07/2017

14. AARC Blueprint https://aarc-project.eu/blueprint-architecture/
07/07/2017

15. Token Translation
07/07/2017

16. Token Translation - WATTS
07/07/2017

17. Materials https://rcdemo.nikhef.nl/ https://watts-dev.data.kit.edu/
07/07/2017

18. Thank You
07/07/2017