Federating HPC Access via SAML: Towards a Plug-and-Play Solution

Kohler, Jens; Simon, Michael A.; Nussbaumer, Martin; Hartenstein, Hannes

doi:10.1007/978-3-642-38750-0_35

Cited by 6 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, this solution is also very hard to be promoted. Jens Köhler's [13] work is similar to ours. They also proposed an LDAP-based solution to keep it transparent to the service provider.…”

Section: Related Worksupporting

confidence: 70%

LDAPRoam: A Generic Solution for Both Web-Based and Non-Web-Based Federate Access

Feng¹,

Wei²

2019

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Identity federation technology has been widely used in recent years. But the solution for federate access is totally different between the Web-Based and non-Web-Based scenarios. Furthermore, it is highly limited for lack of support from non-Web-Based scenarios now. This paper proposes a generic federate access solution based on LDAP roaming, which can provide reliable identity roaming in any internet service. To service providers, our solution is transparent and looks like a LDAP. The paper first presents the difficulties in realizing LDAP roaming and discusses offers solutions to the implementation of LDAP roaming. Then it evaluates the easy integration and usability of LDAP roaming.Finally it compares the Generic Solution with the existing federal access solution.

show abstract

Section: Related Worksupporting

confidence: 70%

LDAPRoam: A Generic Solution for Both Web-Based and Non-Web-Based Federate Access

Feng¹,

Wei²

2019

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…In the following, we introduce the bwIDM concept to federate non web-based services using the WebSSO, ECP and AssertionQuery profiles [4] [3]. The main goals of the concept are to integrate services without requiring any modifications, to lower the threshold for user access and to consider legal aspects in terms of privacy laws and acceptable-use policies.…”

Section: Integration Of Non Web-based Servicesmentioning

confidence: 99%

bwIDM – Federated Access to IT-Based Services at the Universities of the State of Baden-Württemberg

Kohler

Labitzke

Simon

et al. 2014

PIK - Praxis Der Informationsverarbeitung Und Kommunikation

Self Cite

View full text Add to dashboard Cite

The use and provisioning of services across organizations has not only gained momentum in the 'business web', but also in academic environments. For instance, in the state of Baden-Württemberg, national and state-funded cluster computing resources, operated by a single university, have to be accessible by the users of other universities as well. Two avoid that users have to create and maintain dedicated accounts at each organization, the concept of federated identity management (FIM) can be applied. FIM allows users to use a single identity at their home organization to access services that are operated by other organizations.In this paper, we survey major requirements that need to be considered when establishing such a federation and its technical platform. Furthermore, we show how the bwIDM project established a FIM platform for the state of Baden-Württemberg that matches the requirements and that is based on the Security Assertion Markup Language (SAML) standard. In particular, we outline bwIDM's approach on how to integrate non web-based services with SAML federations.

show abstract