Skip to content Skip to navigation

JIRA Issue

[#XCI-318] Enhance SSO Hub to support InCommon authentication

[XCI-318] Enhance SSO Hub to support InCommon authentication Created: 01/31/2018  Updated: 07/12/2018

Status: Proposed
Project: XSEDE Cyberinfrastructure Integration
Component/s: None
Fix Version/s: None

Type: XCI New Capability Priority: Major
Reporter: Venkatesh Yekkirala (Inactive) Assignee: Unassigned
Resolution: Unresolved Votes: 0

XSEDE Priority: -
Public activity link: https://software.xsede.org/display/xci-318
Devel Repository: https://software.xsede.org/svn/xci/activities/xci-318/trunk/
Use Cases:
CAN-06: Authenticate to one or more SP resources, SP services, and XSEDE central services
Effort and Costs:
Staff Name (Lastname, Firstname) Effort (person weeks) Roles or Contributions Status
<Activity Lead Name – Last, First> 6 six weeks of effort to lead and implement the activity (required) none
<User Doc Drafter – Last, First> 0.2 one day of effort to draft user documentation (required ) none
TBD (tester) 1 one week of effort to test the software none
... ... .. none
Deliverables:
Due by Activity Deliverable
DSR Design document*
TRR Implemented Software Capability
TRR Other type of deliverable
TRR Deployment plan*
TRR Test plan*
TRR User documentation*
TRR (post) TRR Baseline* (Shava)
Deployment Deployment Baseline* (Shava)
Deployment Test Report* (Shava)
  • Click on "Deliverables" tab for URL.
Lead Tester: Shava Smallen

 Description   

Currently the XSEDE SSO Hub requires XSEDE Kerberos authentication. CAN-6 states, "The authentication mechanism MUST be able to federate with other mechanisms such as those used by OSG, PRACE, EGI, and InCommon." Migrating the SSO Hub to Globus Auth will give users the option of using InCommon authentication (via CILogon) when logging in. Note that the XSEDE SSO Hub will likely be migrating to Globus Auth due to Globus Toolkit retirement (XCI-127).

Per Jim: "This activity should NOT be launched until the Globus Auth SSH is ready for testing or at least until we have more details on the Globus Auth SSH design. Maybe the activity should just be "Integrate Globus Auth SSH with SSO Hub"? "This gap will be addressed in the activity to integrate Globus Auth SSH with the SSO Hub."