Single sign-on in in-VIGO: role-based access via delegation mechanisms using short-lived user identities

Abstract

Single Sign-On (SSO) is an essential desired feature of computational grids. Its implementation is challenging because resources cross administrative domains and are managed by heterogeneous access schemes. This paper presents an approach for Single Sign-On in a deployed functioning grid called In-VIGO. The approach relies on decoupling grid user accounts from local user accounts and making use of role-based access control lists. Rolebased accesses via delegation mechanisms using shortlived user identities enable In-VIGO to handle interactive applications and application-specific authentication mechanisms. This capability is not present in existing grid architectures. SSO implementations for usage scenarios in In-VIGO are described to highlight the applicability of the proposed approach. In particular, access to interactive applications with their own security mechanisms, such as VNC, and access to remote data can be achieved using proxies that delegate In-VIGO user access via short-lived user identities.

Role based Access Control with Single Sign-on Architecture using web Services for LMS

“…SSO is an access control tool that delivers authentication of a user's access across several software systems and changed services based on the user's permissions while reducing extra logins when the user switches applications within one session [4,5,6]. SSO has essential benefits for organisations with standardised infrastructure and centralised users' database where a single user's entity authentication is critical.…”

“…SSO has essential benefits for organisations with standardised infrastructure and centralised users' database where a single user's entity authentication is critical. Different SSO approaches have been introduced by research communities [4,5], as well as designed and implemented by profitable software makers [9]. Still, it is stimulating to build such a system since there is no standardised way to proceed with SSO application.…”

“…The following subsections will overview two interesting SSO approaches which enrich the basic SSO schema. The first one is the In-VIGO (In-Virtual Information Grid Organization) system [4] with the SSO approach for computational grids, and the second one is the PASS (PrivacyAware Single Sign-on) system [5] with the enhanced privacy of the users' profiles.…”

A Dynamic Healthcare Portal Design and Enhancements

“…It allows users to access all authorized services and resources seamlessly (Adabala et al, 2004;Heckle et al, 2008;Volchkov, 2001;Heckle, 2007;Mauro, 2008). However, its implementation has tremendous complexities that involve overall security policies, user profiles, natures of business, integration of legacy, web applications portfolios, cost structures of Information Technology operations, as well as future application development strategies (Heckle et al, 2008;Volchkov, 2001).…”

“…However, its implementation has tremendous complexities that involve overall security policies, user profiles, natures of business, integration of legacy, web applications portfolios, cost structures of Information Technology operations, as well as future application development strategies (Heckle et al, 2008;Volchkov, 2001). In general, pragmatic approaches adopt the following criteria: 1) modifying existing applications and building new ones, synchronizing passwords to share recourses and www.intechopen.com services; 2) establishing external tools or an authentication middleware, layer to support authentication methods or servers; 3) configuring legacy applications with their existing directories and synchronizing with the enterprise directory, central administration promptly; 4) delegating or mapping user credentials or capabilities on resources; 5) developing trust channels to deliver, share user credentials information (Adabala et al, 2004;Heckle et al, 2008;Volchkov, 2001;Heckle, 2007). In addition, the single sign-on technology can mitigate the shortcomings of id/password approaches.…”