1. Researcher ID September13 2013 Presented by Terry Smith - AAF Technical Manager

2. Researcher ID The brief Creation of a test “sandbox” environment for the Researcher ID -Populate an LDAP directory -Based on Authn and Attributes from AAF or Social Authentication -Simple UI for Researchers to manage their Researcher ID (Passwords, etc) -Extend the accounts with Group membership, permissions and roles -Simple workflow that can be used by resource owners -Test against use cases provided by the RDSI Nodes Determine what it will take to run as a production system

3. Researcher ID Identity Provisioning & Account Management Researcher ID Identity Store Group Mgnt, Workflows and APIs Node Applications & Resources Web Apps Federated and/or Social Authentication + Groups Web Apps Federated and/or Social Authentication + Groups App LDAP or Oauth Authentication + Groups App LDAP or Oauth Authentication + Groups Server Access PAM-LDAP + Groups Server Access PAM-LDAP + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups RestAPI RW Master Replicas LDAP WebUi VOOT Social Authentication Account and Password Management Advanced account provisioning Advanced account provisioning IdP AAF DS IdP Federated Authentication RO Node RO Replicas RO RestAPI LDAP OAuth SAML AA WebUi VOOT SAML IdP OU=People OU=Groups DN=email-address + AAF Core Attrs + MemberOf DN=Group Name Members=…

4. Researcher ID Identity Provisioning & Account Management Researcher ID Identity Store Group Mgnt, Workflows and APIs Node Applications & Resources Web Apps Federated and/or Social Authentication + Groups Web Apps Federated and/or Social Authentication + Groups App LDAP or Oauth Authentication + Groups App LDAP or Oauth Authentication + Groups Server Access PAM-LDAP + Groups Server Access PAM-LDAP + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups RestAPI RW Master Replicas LDAP WebUi VOOT Social Authentication Account and Password Management Advanced account provisioning Advanced account provisioning IdP AAF DS IdP Federated Authentication RO Node RO Replicas RO RestAPI LDAP OAuth SAML AA WebUi VOOT SAML IdP OU=People OU=Groups DN=email-address + AAF Core Attrs + MemberOf DN=Group Name Members=…

5. Researcher ID Identity Provisioning & Account Management Researcher ID Identity Store Group Mgnt, Workflows and APIs Node Applications & Resources Web Apps Federated and/or Social Authentication + Groups Web Apps Federated and/or Social Authentication + Groups App LDAP or Oauth Authentication + Groups App LDAP or Oauth Authentication + Groups Server Access PAM-LDAP + Groups Server Access PAM-LDAP + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups RestAPI RW Master Replicas LDAP WebUi VOOT Social Authentication Account and Password Management Advanced account provisioning Advanced account provisioning IdP AAF DS IdP Federated Authentication RO Node RO Replicas RO RestAPI LDAP OAuth SAML AA WebUi VOOT SAML IdP OU=People OU=Groups DN=email-address + AAF Core Attrs + MemberOf + Password DN=Group Name Members=…

6. Researcher ID Identity Provisioning & Account Management Researcher ID Identity Store Group Mgnt, Workflows and APIs Node Applications & Resources Web Apps Federated and/or Social Authentication + Groups Web Apps Federated and/or Social Authentication + Groups App LDAP or Oauth Authentication + Groups App LDAP or Oauth Authentication + Groups Server Access PAM-LDAP + Groups Server Access PAM-LDAP + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups RestAPI RW Master Replicas LDAP WebUi VOOT Social Authentication Account and Password Management Advanced account provisioning Advanced account provisioning IdP AAF DS IdP Federated Authentication RO Node RO Replicas RO RestAPI LDAP OAuth SAML AA WebUi VOOT SAML IdP OU=People OU=Groups DN=POSIX Username + AAF Core Attrs + MemberOf + Password + Posix Attrs DN=Posix GroupName Members=… + Posix Attrs

7. Researcher ID Identity Provisioning & Account Management Researcher ID Identity Store Group Mgnt, Workflows and APIs Node Applications & Resources Web Apps Federated and/or Social Authentication + Groups Web Apps Federated and/or Social Authentication + Groups App LDAP or Oauth Authentication + Groups App LDAP or Oauth Authentication + Groups Server Access PAM-LDAP + Groups Server Access PAM-LDAP + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups Server Access SSSD Single Sign-on Kerberos, PKI + Groups RW Master Replicas LDAP WebUi VOOT Social Authentication Account and Password Management Advanced account provisioning Advanced account provisioning IdP AAF DS IdP Federated Authentication RO Node RO Replicas RO RestAPI LDAP OAuth SAML AA WebUi SAML IdP OU=People OU=Groups DN=POSIX Username + AAF Core Attrs + MemberOf + Password + Posix Attrs + Kerberos + PKI Certs DN=Posix GroupName Members=… + Posix Attrs Kerberos CA

8. Researcher ID The Use cases dictates the Schema and components that need to be included to build the Researcher ID Infrastructure. Next activity - Building an end to end pilot Researcher ID

9. Researcher ID Possible Protocols and Services supported by the Researcher ID? NFS WebDav Globus Online SSH / SCP SFPT SIF Shares Aspera Grid FTP Web http