Title
| CERN’s Identity and Access Management: A journey to Open Source |
Author(s)
| Corman, Asier Aguado (CERN) ; Rodríguez, Daniel Fernández (CERN) ; Georgiou, Maria V (CERN) ; Rische, Julien (CERN) ; Schuszter, Ioan Cristian (CERN) ; Short, Hannah (CERN) ; Tedesco, Paolo (CERN) |
Publication
| 2020 |
Number of pages
| 9 |
In:
| EPJ Web Conf. 245 (2020) 03012 |
In:
| 24th International Conference on Computing in High Energy and Nuclear Physics, Adelaide, Australia, 4 - 8 Nov 2019, pp.03012 |
DOI
| 10.1051/epjconf/202024503012
|
Subject category
| Computing and Computers |
Abstract
| Until recently, CERN had been considered eligible for academic pricing of Microsoft products. Now, along with many other research institutes, CERN has been disqualified from this educational programme and faces a 20 fold increase in license costs. CERN’s current Authentication and Authorization Infrastructure, dating from 2008, comprises multiple Microsoft services from the web Single-Sign-On to the Accounts Database. Replacing these core components is an opportunity to rebuild the CERN infrastructure using the latest technologies and concepts and to respond to evolving requirements of the community. It is also the appropriate moment to consider the alignment of CERN’s and the Worldwide LHC Computing Grid’s approaches to identity management, to create a more consistent environment for operators, developers and users. 2019 saw the launch of an Alpha version of CERN’s next generation Authentication and Authorization Infrastructure, focusing on free and open source products and responding to the limitations experienced by the current system. We describe the new solution and focus on key changes. |
Copyright/License
| © 2020-2025 The Authors (License: CC-BY-4.0) |