![Page 1: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/1.jpg)
Middleware And Grid Interagency Coordination (MAGIC) at SC13
Jim Basney
CILogon
This material is based upon work supported by the National Science Foundation under grant numbers 0943633 and 1053575 and by the Department of Energy under award number DE-SC0008597. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of the United States Government or any agency thereof.
![Page 2: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/2.jpg)
CILogon www.cilogon.org
CILogon – https://cilogon.org/
• Provides personal digital certificates for access to cyberinfrastructure
• Uses federated authentication for user identification
![Page 3: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/3.jpg)
CILogon www.cilogon.org
Federated Authentication
• Log on to CILogon using your campus (InCommon) or Google (OpenID) account
![Page 4: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/4.jpg)
CILogon www.cilogon.org
Bridging InCommon and IGTF
• Translating mechanism and policy across higher education and grid trust federations
!"#$%"&'()*+&&
!"#$%%&'()*'(#$+*,-&).'/#0&-1#23#%-+4*&)'/#$4(#'%-4-1)%#&'5)-4/#
![Page 5: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/5.jpg)
CILogon www.cilogon.org
Multiple Levels of Assurance • CILogon Silver CA is
accredited by IGTF – Using InCommon Silver
(Level 2) identities • IGTF IOTA profile for
CILogon Basic under development
• Google Authenticator support for second authentication factor
![Page 6: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/6.jpg)
CILogon www.cilogon.org
http://wiki.eugridpma.org/Main/IOTASecuredInfraAP
![Page 7: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/7.jpg)
CILogon www.cilogon.org
Integrated with CyberInfrastructure
![Page 8: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/8.jpg)
CILogon www.cilogon.org
Integrated with Globus Nexus
![Page 9: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/9.jpg)
CILogon www.cilogon.org
Used by OSG Connect
![Page 10: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/10.jpg)
CILogon www.cilogon.org
Used by CI Connect for Duke
![Page 11: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/11.jpg)
CILogon www.cilogon.org
Integrated with DOE KBase
![Page 12: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/12.jpg)
CILogon www.cilogon.org
ligo-proxy-init using CILogon ECP $ ligo-proxy-init scott.koranda Your identity: [email protected] Enter pass phrase for this identity: Creating proxy .................................... Done Your proxy is valid until: Mar 5 13:45:16 2013 GMT $ grid-proxy-info -all subject : /DC=org/DC=cilogon/C=US/O=LIGO/CN=Scott Koranda [email protected] issuer : /DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Basic CA 1 identity : /DC=org/DC=cilogon/C=US/O=LIGO/CN=Scott Koranda [email protected] type : end entity credential strength : 2048 bits path : /tmp/x509up_u1000 timeleft : 71:59:52 (3.0 days)
![Page 13: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/13.jpg)
CILogon www.cilogon.org
CILogon and XSEDE
• CILogon is – a component in the XSEDE architecture – entering the XSEDE engineering process:
architecture, design, and security reviews and operational acceptance tests
• XSEDE can provide sustained operational support to CILogon users (DataONE, OOI, OSG, LIGO, etc.)
CILogon
![Page 14: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/14.jpg)
CILogon www.cilogon.org
0 10 20 30 40 50 60 70 80 90
100 To
tal I
dent
ity P
rovi
ders
IdPs Added via R&S IdPs Added via CILogon
![Page 15: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/15.jpg)
CILogon www.cilogon.org
Adding an IdP to CILogon
• Use self-service web application or contact us for assistance
https://cilogon.org/requestidp/ https://cilogon.org/testidp/
![Page 16: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/16.jpg)
CILogon www.cilogon.org
InCommon Research and Scholarship
program helps services connect with identity
providers.
![Page 17: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/17.jpg)
CILogon www.cilogon.org
Registered Users Per IdP
Google 25%
LIGO 14%
U Chicago
11%
Indiana U
10% ProtectNetwork 7%
UCSD 3%
UIUC 2%
Duke 2%
UW-Madison 2%
UNL 1%
LBNL 1%
Iowa State 1%
U Washington 1%
ANL 1%
JHU 1%
![Page 18: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/18.jpg)
CILogon www.cilogon.org
0 50
100 150 200 250 300 350 400 450
Jul-1
0
Oct
-10
Jan-
11
Apr
-11
Jul-1
1
Oct
-11
Jan-
12
Apr
-12
Jul-1
2
Oct
-12
Jan-
13
Apr
-13
Jul-1
3
Oct
-13
Act
ive
Use
rs P
er M
onth
LIGO Google ProtectNetwork Indiana U U Chicago Other
![Page 19: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/19.jpg)
CILogon www.cilogon.org
Other 12%
Globus Online 6%
IU Gateway 4%
DataONE 1%
CVRG 1%
OOI 56%
LIGO 20%
% of Total Certificates Issued
![Page 20: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/20.jpg)
CILogon www.cilogon.org
0
500
1000
1500
2000
2500
3000 C
ertif
icat
es Is
sued
JWS
PKCS12
ECP
OAuth
![Page 21: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/21.jpg)
CILogon www.cilogon.org
What’s Next • SAML interfederation
– InCommon joining eduGAIN this year – International attribute release
• Growth of federated online CAs – http://redmine.ogf.org/projects/idel-wg
• Level of Assurance (continued) – IGTF IOTA profile – Int’l adoption of Kantara standards – Security incident handling – Multi-factor authentication
![Page 22: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/22.jpg)
CILogon www.cilogon.org
CN CARSI
IN INFED
OM Oman Knowledge ID Federation
PL PIONIERId
TR YETKİM
Identity Federations in pilot
NL SURFconextNO FEIDENZ Tuakiri New Zealand Access FederationPT RCTSaaiSE SWAMIDSI ArnesAAI Slovenska UK UK Access Management Federation for Education and ResearchUS InCommonint IGTF
AT ACOnet Identity FederationAU Australian Access Federation AAFBE Belnet R&E FederationBR CAFeCA Canadian Access Federation CAFCH SWITCHaaiCL COFReCZ eduID.czDE DFN-AAIDK WAYFEE TAAT
Identity Federations in production
ES SIRFI HakaFR Fédération Éducation-RechercheGR GRNETHR AAI@EduHrHU eduID.huIE EdugateIT IDEMJP GakuNinLV LAIFE
Research and Education Identity Federations
This map is intended to provide a high-level overview of countries with identity federations. Last update: 14 October 2013
ZA SAIF
AR MATE
MA eduIDM
COL COLFIRE
PE INCALT LEFT
RO RoEduNet FederationRS iAMRESRU ФEDUrus AAI
refeds.org
![Page 23: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/23.jpg)
CILogon www.cilogon.org 6 Connect | Communicate | Collaborate
!
eduGAIN Interfederation Participants
21 eduGAIN Members 6 Joining eduGAIN 3 Candidate Federations!
edugain.org
![Page 24: CILogon · 2017. 11. 21. · Middleware And Grid Interagency Coordination (MAGIC) at SC13 Jim Basney jbasney@ncsa.illinois.edu CILogon This material is based upon work supported by](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9d5f3fc6f83362032739/html5/thumbnails/24.jpg)
CILogon www.cilogon.org
Thanks!
www.cilogon.org/faq
dx.doi.org/10.1145/2484762.2484791