Date: 26 November 2020
Tiime: 10:00 - 12:30 CET
Places Available: 15 (first come, first served)
Register: https://perun.elixir-czech.cz/fed/registrar/?vo=elixir&group=training
Contact: Michelle Mendonca
Target audience
The target group of the training is developers and administrators of services that want to integrate with some advanced functionality of the ELIXIR AAI for user authentication and authorisation.
Training content
The free remote training consists of a two and half hour webinar followed by homework that the participants are advised to do afterwards. The training will focus on
non-web authentication support by ELIXIR AAI (based on OAuth2 device code flow and
provisioning and deprovisioning of user accounts and authorization data from ELIXIR AAI to the end services (example usage is described in this paper).
As the homework, the participants will set up non-web authentication using the ELIXIR AAI to the remote machines provided by the trainers.
Archived stream
Training will be recorded and the archived stream made available later.
Prerequisites for participants
Participants are expected to have an ELIXIR AAI account. If they do not have one, they can register for it using this link.
Trainers
Dominik František Bučík, Masaryk University, ELIXIR-CZ, ELIXIR AAI task co-lead
Mikael Linden, CSC, ELIXIR-FI, ELIXIR AAI task co-lead
Michal Procházka, Masaryk University, ELIXIR-CZ
Agenda
(Times are in the CET notation)
10:00 - 10:05 | Welcome
10:05 - 10:15 | Introduction to ELIXIR AAI (Mikael Linden)
10:15 - 10:50 | Non-web authentication using ELIXIR AAI (Dominik F. Bucik) - Demonstration of connecting to a remote machine using SSH and OpenID Connect device_code flow via ELIXIR AAI.
Introduction to Device code flow
Includes live demo and explanation of how participants can configure provided machines to replicate the presented functionality.
10:50 - 12:20 | ELIXIR AAI (de) provisioning, Perun API (Dominik F. Bucik)
Introduction to (de)provisioning
de.NBI as an example
How to setup (de)provisioning in ELIXIR AAI
Live demo on authorization data provisioning
12:20 - 12:30 | Wrap-up, Q&A