Welcome

Teams Brief presentation of participants

OATs: Italian Astronomical Archives (IA2) and SKA activities A brief description on structure and activities carried out @OATs will be presented. Focus will be on Italian Astronomical Archives and on SKA related activities. Some consideration on the future desiderata will be reported.

CADC activities Introduction to the CADC activities and services offered to the Astronomical community

Authentication and Authorization Use cases Description of some use cases (CADC and IA2). SKA requirements and other telescopes needs.

Discussion

User Registration, Account Linking, Grouping management systems and unique identifier Best practices suggest to register the users of resources. Some telescope's requirements state the account linking is desirable. Are the GMSs ready for it? Grouper does not allow the account linking, for example. Some scientists would like to be identify by their ORCID. How to merge all those things together?

GMS as VO standard

Credential Delegation Protocol

GMS and the credential delegation protocol @ CADC How GMS store the information about the group membership and how the credential delegation protocol is foreseen to intervene in the process.

Conclusions and discussion

GMS and GROUPER How to interoperate the GMS and Grouper systems.

Credential delegation: X.509 vs OAuth2 Current implementation of credential delegation is based on X.509 certificates. Is it feasible and how to use instead of X.509 a OAuth2 token? What are pro and contra (security, API reliability, complexity etc..) ?

Discussion - Authorization sharing with the account linking How to include the sharing of Authorization tokens using the account linking mechanism?

Discussion - Authorization sharing with the account linking - cont.

Conclusions and any other business