B2 access new ppt available https://www.slideshare.net/EUDAT/eudat-b2access-presentation?ref=https://eudat.eu/b2access-training-suite
Download as PPTX, PDF1 like391 views
B2ACCESS is a federated cross-infrastructure authorisation and authentication framework that enables single sign-on access to EUDAT services. It supports authentication via users' primary identity providers like Google, is integrated with EduGain to support identities from universities and research institutions, and can integrate with any EUDAT or other service using SAML, OAuth2, or X.509. B2ACCESS provides unique and persistent EUDAT user IDs and allows service managers to specify authorisation decisions.
B2 access new ppt available https://www.slideshare.net/EUDAT/eudat-b2access-presentation?ref=https://eudat.eu/b2access-training-suite
- 1. Authentication and Authorisation b2access.eudat.eu www.eudat.eu B2ACCESS The simple and secure authorisation and authentication platform of EUDAT This work is licensed under the Creative Commons CC-BY 4.0 licence Version 1.1 December 2016
- 2. • The federated cross-infrastructure Authorisation and Authentication Framework • Enables single sign-on access to the EUDAT services • Easy to use and secure • Developed on top of the Unity Open Source security framework What is B2ACCESS?
- 3. • Supports several methods of authentication via the users' primary identity providers, including Google • Integrated with EduGain and therefore supports identities from hundreds of Universities and Research institutions around the world. • Can be used as primary identity provider, if necessary • Can be integrated with any EUDAT service and beyond (SAML, OAuth2 and X.509) • Provides unique and persistent EUDAT IDs • Allows service managers to specify authorisation decisions. B2ACCESS Features
- 4. How it works Different methods are used for authentication and for integration with the EUDAT services
- 5. • End Users of the EUDAT services integrated with B2ACCESS • Managers and administrators of the EUDAT services integrated with B2ACCESS • Investigating ways so community applications can be integrated with B2ACCESS to get user identities and attributes for Authorization and Authentication decisions Who benefits from B2ACCESS?
- 6. • Access via https://b2access.e udat.eu • Register and log in using your Google account, Home organisation ID Provider or B2ACCESS ID Simple & Easy to Access
- 7. • For more info: http://eudat.eu/services/b2access • User documentation: http://eudat.eu/services/userdoc/b2access-usage Thank you b2access.eudat.eu
- 8. www.eudat.eu Authors Contributors This work is licensed under the Creative Commons CC-BY 4.0 licence EUDAT receives funding from the European Union's Horizon 2020 programme - DG CONNECT e-Infrastructures. Contract No. 654065 Willem Elbers, CLARIN ERIC Kostas Kavoussanakis, EPCC, The University of Edinburgh Jens Jensen, STFC Sara Garavelli, TRUST-IT Thank you
Editor's Notes
- #2: B2ACCESS is the simple and secure authorisation and authentication platform of EUDAT.
- #3: B2ACCESS is the easy to–use and secure EUDAT federated cross-infrastructure authorisation and authentication framework. It allows users to authenticate themselves using a variety of credentials and then presents the EUDAT services with a single identity for the user. B2ACCESS makes end-user access to the EUDAT services easier, as users only need to sign on once, then use various EUDAT services without needing to input their username and password in the same session. B2ACCESS is a recent development, but it is being adopted by the EUDAT services at a high pace, because it allows users to easily authenticate themselves and use the services. At the same time, it eases user management for the service administrators, which explains why all EUDAT services, user-facing and internal, will eventually use B2ACCESS for authentication and authorisation. B2ACCESS is based on the Open Source Unity framework for federated ID management.
- #4: B2ACCESS supports several methods of authentication via the users' primary identity providers, including OpenID, SAML and x.509. B2ACCESS is integrated with EduGain and therefore support identities from theoretically hundreds of Universities and Research institutions around the world. B2ACCESS can also be used as a primary identity provider, if necessary, but the EUDAT services place higher trust on institutional IDs, then Google (and in future other OpenID providers), then B2ACCESS’ own credentials. B2ACCESS can be integrated with any EUDAT that supports SAML, OAuth2 or X.509 certificates, so it is pretty simple to adopt. Once authenticated through their preferred means, users present the EUDAT services with a unique ID, which is persistent across the EUDAT infrastructure. One of the key reasons for EUDAT developing B2ACCESS is that it allows service managers to specify authorisation decisions in a scalable fashion, by adding the users’ unique IDs to groups. This simplifies management of the service without compromising on security. In future, B2ACCESS will also allow communities to define policies for access control, but this is a service currently available for access to EUDAT services.
- #5: This slide shows the workflow of B2ACCESS. Users authenticate with B2ACCESS using their preferred OpenID, SAML or X.509 identity. At the moment eduGAIN, Google and the B2ACCESS native are available, with more on the pipeline. In future, the institutional IDs will contain tokens which will allow the communities to signal to B2ACCESS that users belong to this community. Irrespective of the authentication mechanism that the user elects, B2ACCESS uses the Unity framework to present a single, EUDAT-specific ID to the EUDAT service end-points. These services natively support OAuth2, SAML or X.509 schemes for authentication and authorisation and benefit from B2ACCESS’ ability to integrate with these schemes. B2ACCESS administrators handle user registration, while EUDAT Service Managers allocate users to groups that can access their services.
- #6: B2ACCESS makes access to EUDAT services simple for the user. Support for social and institutional IDs is welcome news to the EUDAT communities. Additionally, B2ACCESS simplifies the day-to-day running of EUDAT services and increases their uptake and use. We are working towards solutions so that community applications that support one of SAML, OAuth2 or X.509 certificates can benefit from B2ACCESS support to integrate with B2ACCESS and also simplify the Authentication and Authorisation aspects of running their services.
- #7: B2ACCESS can be accessed via the link shown and via the EUDAT homepage. Users can log in using their google accounts, home organisation ID (if registered) or a B2ACCESS ID. Registering with the service is simple and support and help is offered at each stage.
- #8: For more info please visit: http://eudat.eu/services/b2access . The User documentation can be found at : http://eudat.eu/services/userdoc/b2access-usage