WLCG AuthZ Call

Friday 10 Feb 2023, 15:00 → 16:00 Europe/Zurich

Previous Actions:

• Maarten to invite and circulate AuthZ group to RTE TF meeting
• Github issues for IAM scope policies

Proposed agenda:

• Review Previous Actions
• IAM Hackathon Recap
• RTE TF Recap
• CHEP 23 Reminder

 

Zoom meeting:

Link below, in the videoconference section. Please ensure you are signed in to Indico to see the meeting password!

Next Meeting: 

• 24 February

IAMHackathonRecap.pdf

IAMHackathonRecap.pptx

Present: Thomas H, Linda C, Angela C-B, Andrew M, Doug B, Dimitrios C, Max F, Andrei T, Alexandre B, Julie M, Christophe H, Mine AC, David C, Petr V, Dave D

From IAM Hackathon: Tom D (Minutes), Hannah S, Berk B, Michel, Enrico, Federica, Roberta M

Apologies: Maarten L,

Previous Actions:

• Maarten to invite and circulate AuthZ group to RTE TF meeting
• Github issues for IAM scope policies

Proposed agenda:

• Review Previous Actions
• IAM Hackathon Recap
• CHEP 23 Reminder

IAM Hackathon
Petr: Has CILogon done a key rotation in the past, as we know WLCG has?
Dave is unable to clarify

Andrei: Refresh token limited to limited to one day?
Only default value - can be set by client owner
Token refreshes when access token does, and lifetime extended to the max value

CHEP 23 Reminder

AOB:
David C: Authorisation decision points, policy decisions, and central suspension
Propose a more-detailed slot at another meeting for discussions about this - look at where AuthZ decisions need to be made, and how do workflows need to be structured accordingly
Revive the traceability working group soon

Reminder: Timeslot poll