TA6 WP2

Thursday 15 Sept 2022, 10:00 → 11:00 Europe/Berlin

participants:

- Kilian Schwarz (DESY, IT Scientific Computing)

- Alexander Goeggelmann (PTB)

- Christoph Wissing (DESY, CMS)

- Christiane Schneide (DESY, PUNCH4NFDI)

- Michael Wigart (WWU)

- Sebastian Wozniewski (Goettingen)

- Christopher Huhn (GSI)

- Makarim Bouyahiaoui

 

TOP1:

short round of introduction and possible contributions

PTB:

contribution to AAI group organisation

WWU:

data lake, authorisation issues, storage4punch

Goettingen:

Compute4PUNCH, compute resources, Teaching of AAI usage (outreach, TA7)

GSI:

open position not yet filled, to be filled in a few months

make GSI services PUNCH AAI aware

start with storage

AAI group management important

 

TOP2:

presentation of current topics the WP is working on

- AAI and token delegation

users in PUNCH may have multiple roles in one group

users need to be able to select roles and delegate

- Indigo IAM and Helmholtz AAI

features missing in Unity:

authorisation claims

granular authorisation

- Authorisation claims in Unity

WLCG tokens have authorisation claims in access tokens

no user queries by resource providers to central instance needed

- fine grained file access control

- AAI policy

- AAI group usage for DESY Sync & Share and Indico

- 2 factor authorisation in Helmholtz AAI

- Keycloak

- AAI and Base4NFDI

 

TOP3:

everybody should join TA6 WP2 mailinglist

and TA6 mattermost channel