CICI: Secure Data Architecture: CILogon 2.0 - An Integrated Identity and Access Management Platform for Science

当科学家们一起工作时，他们使用网站和其他软件来分享他们的想法和数据。为了确保他们工作的完整性，这些系统要求科学家登录并验证他们是研究特定科学问题的团队的一部分。很多时候，身份和访问验证过程是科学家的绊脚石。科研项目被迫投入时间和精力来开发和支持身份和访问管理(IDAM)服务，分散了他们对研究合作的核心目标的注意力。“CILogon 2.0”项目提供了一个IDAM平台，使科学家能够共同努力，更有效地满足他们的IDAM需求，以便他们可以将更多的时间和精力分配到他们的核心科学研究任务上。为了确保该项目对科学合作做出真正的贡献，研究人员与激光干涉仪引力波天文台(LIGO)科学合作、北美引力波纳赫兹天文台(NANOGrav)物理前沿中心和地球数据观测网络(DataONE)建立了合作伙伴关系。该项目还为更多的科学合作提供培训和推广，该项目支持与极端科学和工程发现环境(XSEDE)的整合，XSEDE为美国的科学研究提供了全国性的网络基础设施。在“CILogon 2.0”项目之前，CILogon和COManage项目分别为联合身份管理和协作组织管理开发了平台。联合身份管理使研究人员能够使用他们的家庭组织身份访问网络基础设施，而不是需要另一个用户名和密码才能登录。协作组织管理使研究项目能够定义授权给协作平台(例如，Wiki、邮件列表和域应用程序)的用户组。“CILogon 2.0”项目整合和扩展了现有的CILogon和COManage软件，为网络基础设施提供了一个综合身份和访问管理(IDAM)平台。该IDAM平台服务于研究合作的独特需求，即需要跨组织和国家动态形成协作小组，共享对数据、仪器、计算集群和其他资源的访问，以实现科学发现。该项目提供了一个软件即服务平台，以方便与网络基础设施的集成，同时使所有软件组件在开放源码许可证下公开可用，以实现重复使用。

When scientists work together, they use web sites and other software to share their ideas and data. To ensure the integrity of their work, these systems require the scientists to log in and verify that they are part of the team working on a particular science problem. Too often, the identity and access verification process is a stumbling block for the scientists. Scientific research projects are forced to invest time and effort into developing and supporting Identity and Access Management (IdAM) services, distracting them from the core goals of their research collaboration. The "CILogon 2.0" project provides an IdAM platform that enables scientists to work together to meet their IdAM needs more effectively so they can allocate more time and effort to their core mission of scientific research. To ensure that the project makes a real contribution to scientific collaborations, the researchers have partnered with the Laser Interferometer Gravitational-Wave Observatory (LIGO) Scientific Collaboration, the North American Nanohertz Observatory for Gravitational Waves (NANOGrav) Physics Frontiers Center, and the Data Observation Network for Earth (DataONE). The project also provides training and outreach to additional scientific collaborations, and the project supports integration with the Extreme Science and Engineering Discovery Environment (XSEDE), which provides a national-scale cyberinfrastructure for scientific research in the US.Prior to the "CILogon 2.0" project, the CILogon and COmanage projects separately developed platforms for federated identity management and collaborative organization management. Federated identity management enables researchers to use their home organization identities to access cyberinfrastructure, rather than requiring yet another username and password to log on. Collaborative organization management enables research projects to define user groups for authorization to collaboration platforms (e.g., wikis, mailing lists, and domain applications). The "CILogon 2.0" project integrates and expands on the existing CILogon and COmanage software to provide an integrated Identity and Access Management (IdAM) platform for cyberinfrastructure. This IdAM platform serves the unique needs of research collaborations, namely the need to dynamically form collaboration groups across organizations and countries, sharing access to data, instruments, compute clusters, and other resources to enable scientific discovery. The project provides a software-as-a-service platform to ease integration with cyberinfrastructure, while making all software components publicly available under open source licenses to enable re-use.