Introduction

• Björn Erik Abt (PSI - Paul Scherrer Institut)
• Jean-François Perrin (ESRF)

What is umbrellaID and current status of developments

• Jean-François Perrin (ESRF)

Overview of AARC and EOSC AAI

• Christos Kanellopoulos

Authorisation Model

• Jean-François Perrin (ESRF)

Local mapping of identities. Community model.

SSO - SAML and OIDC

• Christos Kanellopoulos
• Björn Erik Abt (PSI - Paul Scherrer Institut)

Introduction of protocols. Explanation of the workflows. How are the tokens travelling? Tools for debugging. Q&A

Keycloak introduction

• Jean-François Perrin (ESRF)

Local SSO, keycloak as an example.

Hands on session: Keycloak deployment and integration with UmbrellaID

• Jean-François Perrin (ESRF)

In order to get the full benefit from this session, participants need to have access to a Linux machine (a VM will be perfect) and are guided in installing keycloak. This machine should have access to the internet and should be accessible from the internet (ideally direct access, but HTTP proxy and reverse HTTP proxy are also valid scenarios to get these access). DNS resolution should be in place and should be identical from everywhere (I.E. the machine should be referenced with the same domain name from the RI/lab intranet and public internet network), you also need to have a valid X509 server certificate. Once the keycloak instance will be set up we will link it to the umbrellaID acceptance environment to demonstrate the full flow.

cURL demonstration of OIDC and the integration in your application

• Christos Kanellopoulos
• Björn Erik Abt (PSI - Paul Scherrer Institut)

Wrapup and Q&A

• Christos Kanellopoulos
• Björn Erik Abt (PSI - Paul Scherrer Institut)
• Jean-François Perrin (ESRF)