Speaker
David Schultz
(University of Wisconsin-Madison)
Description
As part of a modernization effort at IceCube, a new unified authorization system has been developed to allow access to multiple applications with a single credential. Based on SciTokens and JWT, it allows for the delegation of specific accesses to cluster jobs or third party applications on behalf of the user. Designed with security in mind, it includes short expiration times on access tokens, refresh tokens, and a revocation option.
| Consider for promotion | No |
|---|
Primary author
David Schultz
(University of Wisconsin-Madison)
