190 likes | 417 Vues
Umbrella AAI Photon / Neutron community. Jean-F. Perrin, Mirjam van Daalen. Contents todays presentation Part 1: Intro Umbrella Part 2: Umbrella Status. Umbrella is the Authentication and Authorisation Infrastructure (AAI) infrastructure for the Photon and Neutron community
E N D
Umbrella AAIPhoton / Neutron community Jean-F. Perrin, Mirjam van Daalen
Contents todayspresentation • Part 1: Intro Umbrella • Part 2: Umbrella Status
Umbrellaisthe Authentication andAuthorisation Infrastructure (AAI) infrastructureforthe Photon and Neutron community • Itisthefirst time that such a kindof IT environmentisoffered: • European wide • Community overlapping • Sharedbetween different EU projects
Umbrellaispartofseveral FP7 projects: • EuroFEL- ESFRI project Free Electron Lasers of Europe • PaNData-Europe, PaNData ODI- FP7 projects • CRISP – Cluster projectof different ESFRI projects • CALIPSO – I3 synchrotroncommunity • NMI3 - I3 neutroncommunity • BioStruct-X – renewalof I3 ELISA FP7 (onlystruct. biol) • Instruct – ESFRI project
Whatarethepresentandupcominguserneeds? Future useroperationatlarge scalefacilities • 40% oftheusers do experimentsat different facilities, transfacilityaccessforusers. • Accestoandmanagementof experimental data (also withinthecollaboration). • Online entrymode: remote experimentaccess • Access toefficientdataanalysistools. • Minimal administrationloadforusers. • Remote fileaccess. • At the end all this needs a unique persistent user identification to have unified access to these tools.
Howdoesitwork? User User Office 1 XXX User Office 2 ILL User Office 3 ESRF User Office 4 PSI
Umbrella Characteristics Overview
Umbrellaisthebasisforvarioususerservicesunderdevelopment Umbrella Characteristics • Info & serviceportal • European proposalsupport (NMI3 & CALIPSO) • Remote experimentaccess • Remote fileaccess • Metadatacatalogue (iCAT) • Without a unique identifier it will not be possible to have unified access and work with these tools.
Umbrella Characteristics • Concept • unique persistent Identifier on EU scale • independent of home institution • life time account • account owned by the user • single sign-on • no possibility for cross-facility information pull • waterproof but slim data protection system
Umbrella Characteristics • Incorporate confidentiality aspects • high competition, especially structural biology • time-window-structured access to experiments and data. • Authorisation is delegated to the systems participating in Umbrella • for highest grade of independence • in heterogeneous environments • no complicated trust relationships
Umbrella Characteristics • Rely on existing local user office structure • Great experience • Do It Yourself operation by the user • Users: manage their personal entries • User offices: supervising; manage authorizations • Principal investigators: have responsibility for their teams and can handle authorization within their group • Base system on professional authentication standard • Shibboleth, federated Single-Sign-On System (SAML), widely used • Special photon / neutron user federation • Supervising by the local User Offices
Umbrella Status • In operation • Basic Umbrella https://umbrellaid.org/euu/ • Geo DNS (server Umbrella distributed between different facilities) • In progress • Access to Umbrella via EduGain (Geant 3+, Switch) • Login with account home institution (Universities etc.) • Test of Umbrella & Moonshot (Geant 3+ , non web based access) • Remote access to workstation, … • Access to iCAT metadata catalogue via Umbrella (ECP)
Next step • How to access cloud resources with FIM technology (VM, Storage) ? • Moonshot ? • …
Umbrella collaborators ALBA • Daniel Salvat DESY • Frank Schluenzen, Rolf Treusch, Thorsten Kracht, Jan-Peter Kurz, Ulrike Lindemann Fermi/Elettra • Cecilia Blasetti, Ornela Degiacomo, Giorgio Paolucci ESRF • Rudolf Dimper, Dominique Porte, Julien Savoyet, Stefan Schulze European XFEL • Krzysztof Wrona, Frederic Le Pimpec GSI • Peter Malzacher, Almudena Montiel Gonzalez, Kilian Schwarz HZB • Thomas Gutberlet, Dietmar Herrendoerfer I LL • Jean-Francois Perrin IPJ (Poland) • Robert Nietubic MaxIV • Krister Larsson PSI • Bjoern Abt, Stephan Egli, Stefan Janssen, Markus Knecht, Mirjam van Daalen, Heinz J Weyer Soleil • Frederique Fraissard STFC • Anthony Gleeson, Tom Griffin, Alistair Mills, Bill Pulford