An OAuth service for issuing certificates to science gateways for TeraGrid users
Authors:
Open Access
- 18 July 2011
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1-6
Abstract
In this paper, we present a TeraGrid OAuth service, integrated with the TeraGrid User Portal and TeraGrid MyProxy service, that provides certificates to science gateways. The OAuth service eliminates the need for TeraGrid users to disclose their TeraGrid passwords to science gateways when accessing their individual TeraGrid accounts via gateway interfaces. Instead, TeraGrid users authenticate at the TeraGrid User Portal to approve issuance of a certificate by MyProxy to the science gateway they are using. We present the design and implementation of the TeraGrid OAuth service, describe the underlying network protocol, and discuss design decisions and security considerations we made while developing the service in consultation with TeraGrid working groups and staff.Keywords
Funding Information
- National Science Foundation (932251)
This publication has 8 references indexed in Scilit:
- Accelerating science gateway development with Web 2.0 and Swift2010
- TeraGrid Science Gateway AAAA Model2010
- Federated login to TeraGrid2010
- Building the PolarGrid portal using web 2.0 and OpenSocial2009
- Using dynamic accounts to enable access to advanced resources through science gateways2009
- TeraGrid Science Gateways and Their Impact on ScienceComputer, 2008
- Toward an OpenSocial Life Science Gateway2008
- Science gateway---Science gateway, portal and other community interfaces to high end resources2006