GSIFTP demo

Browse

Proxy info

User info

Log in without VOMS or with VOMS

Log out

Integration demo for a 'Science Gateway' with RCauth.eu

This 'VO portal' is showing a working demonstration of the CILogon-based AARC pilot scenario. This is a 'portal delegation' scenario, where the user uses federated credentials to leave a personal (optionally VOMS) proxy on a Science Gateway, which can then be used for example to access a storage element. The user does not need to know anything about the underlying PKI infrastructure.

The different components integrated are:

the new, IGTF accredited, IOTA CA RCauth.eu
an EGI-run Master Portal
a DESY-run test dCache instance (/VOs/rcdemo) storage service.
a test VOMS server providing optional VOMS attributes embedded in the proxy (VOMS proxy)
some simple PHP scripts to do the OpenID Connect flow with its /getproxy extension

Some notes:

The EGI MasterPortal is completely agnostic concerning the VOMS server. The requested VO plus the corresponding necessary 'vomses' string is passed in via the client, and goes transparently through the Master Portal.
The dCache test instance is completely wiped everyday, so do NOT rely on it for permanent storage (-;
In order to access the storage element, the user needs to be authorized for accessing (either on identity or VOMS attributes). This provisioning is not part of the current demonstrator.
Similarly the user needs to be enrolled in the VO. How to (semi-)automate this provisioning is currently under investigation within AARC.

How to start

Start by clicking on either the login or login with VOMS tabs above to do a federated login and obtain a valid plain or VOMSified proxy.

Once successfully logged in, you can browse the storage element.

The proxy info and user info tabs show information about the underlying X.509 credential and the OpenID-Connect claims respectively.