DIGITAL INFRASTRUCTURES for RESEARCH 2018 | Serving the user base

Enabling federated login to WLCG

Wednesday, September 28, 2016 - 14:00


Since 2002, WLCG has been authenticating users based on their personal x.509 certificates. The management of long-lived certificates by end users has many disadvantages and poses a security risk for the infrastructure. EduGAIN allows us to replace user-owned certificates by SAML2 authentication tokens issued by trusted institutes. Internally, we translate these tokens into short-lived x.509 certificates which allow transparent access to WLCG web services. We will discuss the progress in this field, thanks to the work of the AARC Project, the training material available and showcase some “EduGAIN Enabled” services. 


Target Audience:

WLCG (High Energy Physics) users and service developers


Benefits for Audience:

The presentation is expected to answer the following questions:
- Why should WLCG change its current access control?
- What are the benefits of Federated Access for the High Energy Physics community?
- How can WLCG Web Services enable Federated Access?


Topic 1: Challenges facing users and service providers


Presenters Organisation
David Groep Nikhef
Hannah Short CERN