26TH INTERNATIONAL CONFERENCE ON COMPUTING IN HIGH ENERGY & NUCLEAR PHYSICS (CHEP2023)

IceCube User Management - OAuth2 in Practice

Not scheduled

1h

Hampton Roads Ballroom and Foyer Area (Norfolk Waterside Marriott)

Poster Poster Poster Session

Speaker

Schultz, David (IceCube, University of Wisconsin-Madison)

Description

The IceCube Neutrino Observatory is a cubic kilometer neutrino telescope located at the geographic South Pole. IceCube recently completed a multi-year user management migration from a manual LDAP-based process to an automated and integrated system built on Keycloak. A custom interface allows lead scientists to register and edit their institution’s user accounts, including group memberships and author list status. Single-sign-on has been fully implemented, with all web logins using OAuth2. Additional internal applications using Keycloak tokens for authentication and authorization are slated for deployment. This replaces the need for shared secrets and x509 certificates, and completes the transition from GridFTP to HTTP-based file transfers with tokens.

Presentation materials

poster - IceCube User Management - OAuth2 in Practice.pdf