participants:
- Kilian Schwarz (DESY, IT Scientific Computing)
- Alexander Goeggelmann (PTB)
- Christoph Wissing (DESY, CMS)
- Christiane Schneide (DESY, PUNCH4NFDI)
- Michael Wigart (WWU)
- Sebastian Wozniewski (Goettingen)
- Christopher Huhn (GSI)
- Makarim Bouyahiaoui
TOP1:
short round of introduction and possible contributions
PTB:
contribution to AAI group organisation
WWU:
data lake, authorisation issues, storage4punch
Goettingen:
Compute4PUNCH, compute resources, Teaching of AAI usage (outreach, TA7)
GSI:
open position not yet filled, to be filled in a few months
make GSI services PUNCH AAI aware
start with storage
AAI group management important
TOP2:
presentation of current topics the WP is working on
- AAI and token delegation
users in PUNCH may have multiple roles in one group
users need to be able to select roles and delegate
- Indigo IAM and Helmholtz AAI
features missing in Unity:
authorisation claims
granular authorisation
- Authorisation claims in Unity
WLCG tokens have authorisation claims in access tokens
no user queries by resource providers to central instance needed
- fine grained file access control
- AAI policy
- AAI group usage for DESY Sync & Share and Indico
- 2 factor authorisation in Helmholtz AAI
- Keycloak
- AAI and Base4NFDI
TOP3:
everybody should join TA6 WP2 mailinglist
and TA6 mattermost channel