IAM4NFDI – The Community Experience

This work is licensed under a Creative Commons Attribution-NoDerivatives 4.0 International License. IAM4NFDI – The Community Experience Marius Politze RWTH Aachen University IAM4NFDI [NFDI4Ing, NFDI-MatWerk] on behalf of the project team: S. Apweiler, M. Bonn, S. Ebrahimi, P. Gietz, M. Hardt, L. Hofer, D. Hübner, I. Lang, M. Nellesen, T. Michels, W. Pempe, C. Pohl, M. Politze Funded by DFG as part of NFDI. Grant Number: 521466146 NFDI-AAI Architecture 2 Components and Roles SP-IdP Proxies Virtual Organisations (VOs) Services / SPs Infrastructure (NFDI-AAI) VO VO VO VO VO Users Members of VOs Identity Providers Typical Semantic Caveat •Some terms are defined differently in different communities! •Most Prominent Example: •The NFDI “Consortium” => AAI: “Community” •NFDI consortia serve their “Communities” => AAI: “Virtual Organisation (VO)” 3 Results so Far… •Demonstration instances of all CAAI Implementations available •Available Solutions: •AcademicID: •Operated and developed by GWDG •didmos: •Operated and Developed by DAASI international GmbH •Reg-APP: •Operated and developed by KIT •Unity: •Operated by FZ-Jülich •Developed by BixBit / AuthVizor 4 Some CAAI Features •Part of the DFN-AAI federation •Self-Registration / „Homeless“ Users or ORCID Login •MFA & SSH Key management •SAML-and OIDC-based login provider •VO Management •SP Management •Attribute translation & Attrbute-based authorization •Deprovisioning •… 5 This work is licensed under a Creative Commons Attribution-NoDerivatives 4.0 International License. Engaging the NFDI Community Incubator Process Results so Far •Covering 14/26 consortia after second round of incubators 7 Community AAI <-> Consortia Map 6 months Sprint phases: •One sprint lasts 4 weeks •Sprint demo at the end of each sprint •Implementation is organized independently by the teams Starting preparation for the next cycle Resubmit project Project successfully completed Project not completed successfully Call for Incubator Projects Submission deadline for the next cycle Evaluating and prioritizing the submitted projects Selecting and preparing projects for the next cycle Day -90 Day -30 Day 0 Incubator Process 8 Call for 3rd incubator cycle open until 2024-12-18! Nov 24 Dec 24 Feb 24 Interim Summary of Incubators after 2nd Round •Different Requirement Profiles •7 x consulting and standard onboarding •4 x development of new features •2 x needed fundamental rework •2 x shifted for next round due to lack of technical prerequisites on IAM side •Coverage •All CAAIs have at least one Customer •Coverage >14 (>50%) Consortia 9 Coscine –Status Update IAM4NFDI Incubator 25.04.2024 16 Rolleninformationen: Was wurde bereits erledigt? •Treffen & Identifikation der Arbeitspakete (Epics) •Übertragung der Rolleninformation beim Prototypen •Attribut wird geliefert, aber noch nicht genutzt Muss noch erledigt werden: •Prototyp àstabile Version •Möglichkeit zur Vergabe zusätzlicher Attribute •z.B. wenn Organisation die Rollenpflege nicht selbst übernehmen kann (stattdessen z.B. NFDI4Ing Geschäfststelle) •Gespräche mit KIT und IdM nötig Status Update –Was wurde erledigt & was muss noch erledigt werden? Coming Up Next… Incubator Process Round 3 •Submission: 18.12.2024 Approach us! •Core Team: [email protected] •Subsciribe: nfdi-aai-in[email protected] and section-infra-wg-[email protected] 17 This work is licensed under a Creative Commons Attribution-NoDerivatives 4.0 International License. Funded by DFG as part of NFDI. Grant Numbers: 521453681, 521460392, 521462155, 521463400, 521466146, 521471126, 521473512, 521474032, 521475185, 521476232 Questions!?