An XACML profile and implementation for Authorization Interoperability between OSG and EGEE

Document #:

CS-doc-3713-v1

Document type:

Presentation

Submitted by:

Ted Hesselroth

Updated by:

Ted Hesselroth

Document Created:

04 Mar 2010, 10:57

Contents Revised:

04 Mar 2010, 10:59

Metadata Revised:

04 Mar 2010, 11:56

Abstract:

Describes the work of a collaboration of software contributors to the OSG and EGEE in the area of authorization, with the goal of interoperability among software components. A review of the authorizations models is given, followed by an explanation of the technical solution, namely, the use of XACML callouts. The XACML profile for grid authz interoperability is discussed, followed by a description of the required software modifications and the current state of development.

Files in Document:

• Talk given at globusWorld 2010 on authorization interoperability between OSG and EGEE (GlobusWorld-AuthZ-Interop-talk-v1.2.ppt, 1.1 MB)
• Talk given at globusWorld 2010 on authorization interoperability between OSG and EGEE (pdf) (GlobusWorld-AuthZ-Interop-talk-v1.2.pdf, 693.8 kB)

Topics:

• Shared Systems and Services:Grid:OSG
• High Performance Computing
• CS Office & Governance:Grants & Federal Funding Projects:SciDAC
• Scientific Computing Facilities

Authors:

• Gabriele Garzoglio
• Ted Hesselroth

Keywords:

XACML authorization OSG EGEE SAML gPlazma SCAS GUMS SAZ LCAS LCMAPS

Notes and Changes:

Based on talk given at CHEP 2009 and OGF 26.