Enhancing Research Collaboration with AAI Approaches in EOSC-Hub Communities
Explore how EOSC-hub's AAI approach facilitates seamless access to research data across disciplines, leveraging interoperable solutions and eduGAIN for international collaboration. Learn about the general AAI requirements, key features, and best practices outlined by AARC and FIM4R initiatives.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
AAI approach for EOSC-Hub communities Nicolas Liampotis (GRNET) eosc-hub.eu @EOSC_eu EOSC-hub receives funding from the European Union s Horizon 2020 research and innovation programme under grant agreement No. 777536.
In a nutshell EOSC-hub AAI will: Contribute to the EOSC infrastructure implementation roadmap by enabling seamless access to a system of research data and services provided across nations and disciplines Build on existing interoperable AAI solutions from EGI Federation, EUDAT CDI, and INDIGO-DataCloud that have successfully delivered a portfolio of operational services in this field over the last years Leverage eduGAIN identity providers and other institutional or social media credentials to expand the access to researchers, high-education, and business organisations 17/04/2018 2
General AAI Requirements Several initiatives, including the AARC project, have explored the research community requirements for federated identity and access management AARC Analysis of user community and service provider requirements https://aarc-project.eu/wp-content/uploads/2015/10/AARC- DJRA1.1.pdf - TERENA AAA Study https://www.terena.org/publications/files/2012-AAA- Study-report-final.pdf - FIMR4 paper https://cdsweb.cern.ch/record/1442597/files/CERN-OPEN- 2012-006.pdf FIM4R version 2 https://fim4r.org/wp- content/uploads/2018/03/FIM4R-Requirements-FROZEN-March-1st- TIIME-2018.pdf 17/04/2018 3
Requirements Summary - AARC Attribute Release Attribute Aggregation User SP Friendliness Friendliness Persistent Unique Id Credential translation User Managed Information Credential Delegation Levels of Assurance Guest users Best Practices Step-up AuthN Community based AuthZ Non-web- browser Incident Response Social & e- Gov IDs 17/04/2018 4
Requirements Summary FIM4R Version 2 Identity Lifecycle Discovery & Usability Authorization Attribute Release Security Research eInfratructure Assurance Usability Beyond Web Onboarding & support Collateral Infrastructure 17/04/2018 5
AARC Blueprint Architecture approach A set of interoperable architectural building blocks on top of eduGAIN for international Research Collaboration 4/13/2025 6
AARC Blueprint Architecture approach Adopted by e-Infrastructures providers and research infrastructures, e.g. EUDAT B2ACCESS INDIGO IAM EGI Check-in 4/13/2025 7
EOSC-hub AAI: Multi-BPA approach Researchers sign in with their community identity via their Research Community AAI Researchers register once! Community-specific services are connected to a single Research Community AAI E-Infra services are connected to a single e-infra AAI service gateway, e.g. B2ACCESS, Check-in, IAM, etc Generic services (e.g. RCauth.eu Online CA) may be connected to more than one AAI proxies 17/04/2018 8
EOSC-hub AAI: Dual-purpose proxies EOSC-hub AAI proxies may serve a dual purpose: - Service gateway - Community identity management Examples: EUDAT B2ACCESS, EGI Check-in, INDIGO IAM 17/04/2018 9
EOSC-hub AAI: An example 17/04/2018 10
Next steps Adopt upcoming AARC architecture & policy recommendations on - Attribute harmonisation (e.g. affiliation information) - AUP alignment Complete integration activities between EOSC-hub AAI services Investigate usability, authorization, delegation and user (de)provisioning aspects in complex multi-domain scenarios Investigate EOSC-hub catch-all community AAI services 17/04/2018 11
Get in touch! If you want to collaborate, or want more information, please send your comments, questions or suggestions about the EOSC-hub AAI at aai-int@mailman.eosc-hub.eu
nliam@grnet.gr @EOSC_eu eosc-hub.eu
