1. http://aarc-project.eu Authentication and Authorisation for Research and Collaboration Christos Kanellopoulos https://wiki.geant.org/display/AARC/AARC+Architecture+-+private JRA1 Architecture for an integrated and interoperable AAI Milan, 02 November 2015 AARC JRA1 WP Leader GRNET

2. http://aarc-project.eu 13:30 – 14:00 JRA1 Overview – Christos Kanellopoulos 14:00 – 14:45 Requirement Analysis (JRA1.1) – Christos Kanellopoulos on behalf of Peter Solagna 14:45 – 15:30 Models for implementing Attribute Authorities and Token Translation Service – Andrea Biancini 15:15 – 16:00 Coffee break 16:00 – 16:30 Models for supporting Guest Identities – Jens Jensen (Remote) 16:45 – 17:30 Blueprint Architectures – Marcus Hardt 2 Agenda

3. http://aarc-project.eu 3 JRA1 Tasks and Participating Organizations TaskTask name# PartnersPMs JRA1.0Work package leadership (Leader: Christos Kanellopoulos - GRNET) 15GRNET (5) JRA1.1Requirement analysis (Leader: Peter Solagna - EGI.eu) 812.5GRNET (2), NIKHEF (0.5), LIBER (1), MZK (2), EGI (3), KIT (2), GARR (2) JRA1.2Blueprint architectures (Leader: Marcus Hardt - KIT) 1025GRNET (4), NIKHEF (0.5), SURFNET (3), EGI (3), PSNC (2), KIT (5), DAASI (2), STFC (1.5), JUELICH (1), CESNET (3)) JRA1.3Models for supporting guest identities (Leader: Jens Jensen - STFC) 510GRNET (2), PSNC (1), DAASI (2), GARR (2) STFC (3) JRA1.4Models for implementing Attribute Providers and Token Translation Services (Leader: Andrea Biancini - GARR) 922.5GRNET (2), EGI (3), PSNC (3), KIT (1), DAASI (2), GARR (3), STFC (1.5), JUELICH (2), CESNET (3), CSC (2)

4. http://aarc-project.eu 4 JRA1 Overview DEL/MSMonthTitleResponsible ❖ DJRA1.1 04 (201508) 05 (201509) Analysis of user-community requirementsEGI.eu ❖ MJRA1.1 08 (201512)Existing AAI and available technologies for federated access.EGI.eu ❖ MJRA1.2 12 (201604)Design for deploying solutions for "Guest Identities"STFC ❖ MJRA1.3 12 (201604)Design for the integration of an Attribute Management toolGARR ❖ MJRA1.4 15 (201607)First Draft of the blueprint architectureKIT ❖ DJRA1.2 24 (201704)Blueprint architecturesKIT We are here

5. http://aarc-project.eu 5 JRA1 Overview We are here During this period: 12 documents in progress (https://goo.gl/5smDKR) 1 Deliverable submitted (with a short delay), 4 milestones in progress VC: 10 JRA1, 4 JRA1.2, 2 JRA1 Task Leaders

6. http://aarc-project.eu 6 Architecture Design Analysis of user community requirements Existing AAI and available technologies for federated access Design for deploying solutions for “Guest Identities” Design for the integration of an Attribute Management Tool Blueprint Architecture Sep15Dec15Apr15Apr17Jul16 Nov15

7. http://aarc-project.eu “DJRA1.1 – Analysis of user community requirements” Delivered to the EC beginning of October (1 month delay) Update (on the AARC wiki) – November/December/January) “MJRA1.1 - Existing AAI and available technologies for federated access” ToC – Early September October 2015 1 st Draft – October 2015 (Internal document) 2 nd Draft – November 2015 (Almost final document, send to external reviewers/proof readers) Final version – December 2015 (Send to EC) Use cases / User Stories – TENTATIVE Plan 1 st Iteration – December 2015 2 nd Iteration – February 2016 3 rd Iteration – April 2016 7 JRA1.1 – Requirement Analysis | Current Status | Tentative Plan

8. http://aarc-project.eu “MJRA1.4 – First draft of the blueprint architecture” High Level Diagrams – October 2015 (Internal document) Draft High Level Blueprint Architecture Design – December 2015 Distribute to stakeholders for comments – January 2016 Draft High Level Blueprint Architecture Design (Update) – March 2015 ToC – April 2016 1 st Draft – May 2015 (Internal document) 2 nd Draft – June 2015 (Almost final document, send to external reviewers/proof readers) Final version – July 2015 (Send to EC) 8 JRA1.2 – Blueprint Architectures | Current Status | Tentative Plan

9. http://aarc-project.eu “DJRA1.2 – Blueprint Architectures” – TENTATIVE PLAN Blueprint architecture design update – October 2016 Distribute to stakeholders – November 2016 ToC – January 2017 1 st Draft – February 2017 (Internal document) 2 nd Draft – March 2017 (Almost final document, send to external reviewers/proof readers) Final version – April 2017 (Send to EC) 9 JRA1.2 – Blueprint Architectures | Current Status | Tentative Plan

10. http://aarc-project.eu “MJRA1.2 – Design for deploying solutions for ‘Guest Identities’” Brainstorming document – December 2015 (Internal document) ToC – January 2016 1 st Draft – February 2016 (Internal document) 2 nd Draft – March 2016 (Almost final document, send to external reviewers/proof readers) Final version – April 2016 (Send to EC) 10 JRA1.3 – Models for supporting “Guest Identities” | Current Status | Tentative Plan

11. http://aarc-project.eu AA for Authorization – January 2016 (Internal document) Token Translation Services to bridge different AAI systems and technologies – February 2016 (Internal Document) “MJRA1.4 – Design for the integration of an Attribute Management Tool” Information Flows for AAs – July 2015 (Internal Document) Terms and Definitions for AAs – August 2015 (Internal Document) ToC – October 2015 1 st Draft – October 2015 (Internal document) (??) 2 nd Draft – January 2016 (Almost final document, send to external reviewers/proof readers) (??) Final version – April 2016 (Send to EC) 11 JRA1.4 – Models for implementing attribute providers and token translation services | Current Status | Tentative Plan

12. http://aarc-project.eu JRA1.1 Present current status of requirements Next step for requirements gathering Discussion of MJRA1.1 JRA1.2 Get feedback on the first draft of the high level architecture Get consensus aroung the architecture JRA1.3 Describe the problem space of “Guest Identities” Receive input from NA3 Receive input from SA1 JRA1.4 Discussion on AA models from the point of view e-Infrastructure and research communities Initiate the discussion on Token Translation Services Finalize the ToC for MJRA1.3 12 Goals for today’s meeting

13. http://aarc-project.eu © GEANT on behalf of the AARC project. The research leading to these results has received funding from the European Union’s Horizon 2020 research and innovation programme under Grant Agreement No. 653965 (AARC). Thank you Any Questions? Christos Kanellopoulos