Presentation is loading. Please wait.

Presentation is loading. Please wait.

CRIC ・ Authentication & Authorization

Published byStanislas Fradette Modified over 6 years ago

Similar presentations

Presentation on theme: "CRIC ・ Authentication & Authorization"— Presentation transcript:

1 CRIC ・ Authentication & Authorization
Aresh Vedaee CRIC ・ Authentication & Authorization

2 Authentication Sources (Role = List of permissions)
MAPPING SCHEMA AUTHENTICATION Authentication Sources SSO CERN HR DB VOMS CRIC DB … Principals Users Groups (Group = Collection of individuals) Roles (Role = List of permissions) Site Admin Experiment Site Support Experiment Admin CRIC Admin

3 Authentication Sources (Role = List of permissions)
MAPPING SCHEMA AUTHENTICATION AUTHORIZATION Authentication Sources SSO CERN HR DB VOMS CRIC DB … Principals Users Groups (Group = Collection of individuals) Roles (Role = List of permissions) Site Admin Experiment Site Support Experiment Admin CRIC Admin

4 Authentication sources (Role = List of permissions)
MAPPING SCHEMA AUTHENTICATION AUTHORIZATION PERMISSIONS (Permission = Action + Entity) Authentication sources SSO CERN HR DB VOMS CRIC DB … Principals Users Groups (Group = Collection of individuals) Roles (Role = List of permissions) Site Admin Experiment Site Support Experiment Admin CRIC Admin Create Modify Delete Read Actions Object instances Object properties WEB UI / API Entities

5 Authentication Sources (Role = List of permissions)
MAPPING SCHEMA AUTHENTICATION AUTHORIZATION PERMISSIONS (Permission = Action + Entity) Authentication Sources SSO CERN HR DB VOMS CRIC DB … Principals Users Groups (Group = Collection of individuals) Roles (Role = List of permissions) Site Admin Experiment Site Support Experiment Admin CRIC Admin Create Modify Delete Read Actions Object instances Object properties WEB UI / API Entities Restrictions

6 ROLES CORE Expert Experiment Expert Site A Site A Site B Site B Site C
SEs CEs Site A SEs CEs Site A SEs CEs Site B SEs CEs Site B SEs CEs Site C

7 ROLES CORE Expert Experiment Expert Experiment Admin Site A Site A
SEs CEs Site A SEs CEs Site A SEs CEs Site B SEs CEs Site B Experiment Admin + Restriction( VO = “CMS” ) SEs CEs Site C

8 ROLES CORE Expert Experiment Expert Experiment Admin
SEs CEs Site A SEs CEs Site A SEs CEs Site B SEs CEs Site B Experiment Admin + Restriction( VO = “CMS” ) SEs CEs Site C Experiment Site Support + Restriction( VO = “CMS”, Site = “Site B” )

9 ROLES CORE Expert Experiment Expert Site Admin Experiment Admin
SEs CEs Site A SEs CEs Site A Site Admin + Restriction( Site = “Site A” ) SEs CEs Site B SEs CEs Site B Experiment Admin + Restriction( VO = “CMS” ) SEs CEs Site C Experiment Site Support + Restriction( VO = “CMS”, Site = “Site B” )

Download ppt "CRIC ・ Authentication & Authorization"

Similar presentations

Lesson 3: Managing User Access and Security (Cache Administrators only)

Lesson 3: Managing User Access and Security (Cache Administrators only)
Site Authorization Service (SAZ) at Fermilab Vijay Sekhri and Igor Mandrichenko Fermilab CHEP03, March 25, 2003.

Site Authorization Service (SAZ) at Fermilab Vijay Sekhri and Igor Mandrichenko Fermilab CHEP03, March 25, 2003.
OSG AuthZ Architecture AuthZ Components Legend VO Management Services Grid Site GUMS Site Services SAZ CE Gatekeeper Prima Is Auth? Yes / No SE SRM gPlazma.

OSG AuthZ Architecture AuthZ Components Legend VO Management Services Grid Site GUMS Site Services SAZ CE Gatekeeper Prima Is Auth? Yes / No SE SRM gPlazma.
VOMRS/VOMS-Admin 2.0.x 2.5.x comparison Mar 28, 2008 Middleware Security Group Meeting Tanya Levshina and Gabriele Garzoglio Computing Division, Fermilab.

VOMRS/VOMS-Admin 2.0.x 2.5.x comparison Mar 28, 2008 Middleware Security Group Meeting Tanya Levshina and Gabriele Garzoglio Computing Division, Fermilab.
30-Jan-03D.P.Kelsey, GridPP Security1 Security GridPP6 30 Jan 2003 Coseners House David Kelsey CLRC/RAL, UK

30-Jan-03D.P.Kelsey, GridPP Security1 Security GridPP6 30 Jan 2003 Coseners House David Kelsey CLRC/RAL, UK
Membership, Role Manager and Profile Membership, Role Manager and Profile Matt Gibbs ASP.NET Development Manager.

Membership, Role Manager and Profile Membership, Role Manager and Profile Matt Gibbs ASP.NET Development Manager.
Operating Systems & Information Services CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Open source web analytics.

Operating Systems & Information Services CERN IT Department CH-1211 Geneva 23 Switzerland t OIS Open source web analytics.
Chapter 7 WORKING WITH GROUPS.

Chapter 7 WORKING WITH GROUPS.
VOX Project Status T. Levshina. Talk Overview VOX Status –Registration –Globus callouts/Plug-ins –LRAS –SAZ Collaboration with VOMS EDG team Preparation.

VOX Project Status T. Levshina. Talk Overview VOX Status –Registration –Globus callouts/Plug-ins –LRAS –SAZ Collaboration with VOMS EDG team Preparation.
Ákos FROHNER – DataGrid Security Requirements- 2002-04-09 - n° 1 Security Group D7.5 Document and Open Issues

Ákos FROHNER – DataGrid Security Requirements n° 1 Security Group D7.5 Document and Open Issues
The Future of Fields or, How Snow and Flu in Chicago Clarified What Drupal is Good For.

The Future of Fields or, How Snow and Flu in Chicago Clarified What Drupal is Good For.
Intro to Grouper There’s nothing fishy about Identity Management with Grouper.

Intro to Grouper There’s nothing fishy about Identity Management with Grouper.
VOMRS/VOMS-Admin Convergence and VO Services Project Status Tanya Levshina Computing Division, Fermilab.

VOMRS/VOMS-Admin Convergence and VO Services Project Status Tanya Levshina Computing Division, Fermilab.
Grid User Management System Gabriele Carcassi HEPIX 2004 18 October 2004.

Grid User Management System Gabriele Carcassi HEPIX October 2004.
Author - Title- Date - n° 1 Partner Logo WP5 Summary Paris John Gordon WP5 6th March 2002.

Author - Title- Date - n° 1 Partner Logo WP5 Summary Paris John Gordon WP5 6th March 2002.
EduGain Federation – Web SSO

EduGain Federation – Web SSO
Maarten Litmaath (CERN), GDB meeting, CERN, 2006/02/08 VOMS deployment Extent of VOMS usage in LCG-2 –Node types gLite 3.0 Issues Conclusions.

Maarten Litmaath (CERN), GDB meeting, CERN, 2006/02/08 VOMS deployment Extent of VOMS usage in LCG-2 –Node types gLite 3.0 Issues Conclusions.
Ákos FROHNER – DataGrid Security - 2002-05-17 - n° 1 Security Group D7.6 Design Ideas

Ákos FROHNER – DataGrid Security n° 1 Security Group D7.6 Design Ideas
Roles 1. Your Role: End User End Users use Inside NCDOT and Connect NCDOT for basic browsing and reading Typical tasks can include: Open or download files.

Roles 1. Your Role: End User End Users use Inside NCDOT and Connect NCDOT for basic browsing and reading Typical tasks can include: Open or download files.
Placeholder ES 1 CERN IT Experiment Support group Authentication and Authorization (AAI) issues concerning Storage Systems and Data Access Pre-GDB, 2013-02-12.

Placeholder ES 1 CERN IT Experiment Support group Authentication and Authorization (AAI) issues concerning Storage Systems and Data Access Pre-GDB,

Similar presentations

Ads by Google