EUGridPMA+: Welcome, agenda, minutes last meeting, note taker, introductions

• David Groep (Nikhef National institute for subatomic physics (NL))

Room: 513/1-024

Self-audit review & status of suspended authorities

• Cosmin Nistor

Room: 513/1-024

Developments in the Asia Pacific and the APGridPMA

• Eric Yen (Academia Sinica)
• Eisaku Sakane

Room: 513/1-024

CA Update I: RCauth HA and its evolution

• Jens Jensen
• Nicolas Liampotis
• Mischa Sallé (NWO-I Nikhef)

Room: 513/1-024

CA Update II: UKeScience updates: catch-all services for WLCG hosts?

• John Kewley

Room: 513/1-024

PKIX technology topics

• David Groep (Nikhef National institute for subatomic physics (NL))

Room: 513/1-024 S/MIME BR evolution, splitting user S/MIME email and authentication credentials SHA-1 issues

Evolving the AARC BPA, security, trust, and identity questions for RIs

• Licia Florio (GEANT)
• David Kelsey (Science and Technology Facilities Council STFC (GB))
• David Groep (Nikhef National institute for subatomic physics (NL))

Room: 513/1-024

EOSC Security and Trust Coordination in the future

• David Groep (Nikhef National institute for subatomic physics (NL))

Room: 513/1-024 updates on the EOSC security coordination, ISM policy development, and expectations

Assurance and FIM4R (open space) Room: 513/1-024 preparation slot open for other topics as they may arise!

Updates from the Americas, from ACCESS-CI, and the token transition

• Derek Simmel

Room: 513/1-024

WLCG Trust Evolution discussion Room: 513/1-024

Enabling Communities: first steps in GN5

• David Groep (Nikhef National institute for subatomic physics (NL))
• Maarten Kremers (SURF)

Room: 28/S-029

WLCG AAOPS assessment

• Hannah Short (CERN)

Room: 28/S-029

eduTEAMS/EOSC Core AAI AAOPS assessment

• Christos Kanellopoulos

Room: 28/S-029

UK-IRIS AAOPS assessment

• David Kelsey (Science and Technology Facilities Council STFC (GB))
• Thomas Dack

Room: 28/S-029

Trust lists and OIDC Federation Room: 28/S-029 in light of the AAOPS assessment and peer review - planning for the EOSC ...

Planning for the next meeting

• David Groep (Nikhef National institute for subatomic physics (NL))

Room: 28/S-029 and for the FIM4R sessions on Wednesday and Thursday

FIM4R: Welcome Room: 31/3-004 - IT Amphitheatre

Community Updates Room: 40/S2-B01 - Salle Bohr

Passports and GA4GH

• Tommi Nyrönen (C)

Room: 40/S2-B01 - Salle Bohr

Development in HPCI and GakuNin

• Eisaku Sakane

Room: 40/S2-B01 - Salle Bohr

FIM4R: Requirements for future EU projects Room: 40/S2-B01 - Salle Bohr

Challenges of commercial SP Integration (Discussion) Room: 40/S2-B01 - Salle Bohr There is a growing trend for IT departments to outsource services to third parties. This often has consequences for authentication and authorisation - How are these services integrated? Typically services can be registered behind an enterprise Single Sign-On but not always. This creates multiple authentication workflows for users at a cost to security. - Will account blocking be propagated? - Some large service suites offer SSO as a service and nudge organisations to migrate fully from their own independent SSO. Is this a good idea for research organisations?

Browser Compatibility

• Heather Flanagan

Room: 40/S2-B01 - Salle Bohr Browsers are changing their rules about third party cookies (among other things). This directly impacts us in federated identity. What do we need to be aware of? What should we be doing? Heather will give us a presentation and there will be an open discussion.

Introduction to FIM4L

• Jos Westerbeke

Room: 40/S2-B01 - Salle Bohr

Federated shell access (job submission)

• Marcus Hardt (Kalrsruhe Institute of Technology)
• Marcus Hardt (KIT)

Room: 40/S2-B01 - Salle Bohr

Proxies in federations

• David Kelsey (STFC - Science & Technology Facilities Council (GB))

Room: 40/S2-B01 - Salle Bohr How do proxies need to be managed to participate fully in identity federations?

Sharing an attribute credential from Self-Sovereign Identity model to the FIM model.

• Mauladi Mauladi

Room: 40/S2-B01 - Salle Bohr

Unconference topics Room: 40/S2-B01 - Salle Bohr Slot for any common concerns that are raised over the 2 days, e.g. Keycloak users,

Wrapup

• Maarten Kremers (SURF)

Room: 40/S2-B01 - Salle Bohr