[ogsa-authn-bof] Notice: Express Authentication Profile (EAP) and related docs

[Alan Sill]

Dear security-protocol and profile-minded folks,

Much work has been going on recently within the Open Grid Forum Open  
Grid Services Architecture work group to define profiles and  
protocols by which grid services would be able to advertise, and user  
applications would be able to discover, authentication requirements  
within the context of WS-Security SOAP interchanges.

Collectively, the documents related to this are referred to as the  
"Express Security Profile and Use Case" and the collection,  
comprising four documents at present, can be found at the location:

https://forge.gridforum.org/sf/docman/do/listDocuments/projects.ogsa- 
wg/docman.root.working_drafts.security_profiles_use_case

(Join this link into one line if it has become split by e-mail  
transmission.)

A lot of work has gone into the creation of these documents,  
primarily by the University of Virginia group in conjunction with  
members of the OGSA-WG.  There are currently the following documents  
in the collection:

  doc14548: grid-sec-use-cases.doc
  doc14549: draft-ogf-ogsa-sp-secure-addressing
  doc14551: draft-ogf-ogsa-sp-secure-soap
  doc14550: draft-ogf-ogsa-sp-secure-transport

Your review as potential users of these emerging standards would be  
appreciated.  Opportunities to address the OGSA-WG group working on  
this either by e-mail or by teleconference can easily be arranged.

Contacts for the above work:

Duane Merrill <dgm4d at cs.virginia.edu>
Andrew Grimshaw <grimshaw at virginia.edu>
Hiro Kishimoto <hiro.kishimoto at jp.fujitsu.com>
Savva Andreas <andreas.savva at jp.fujitsu.com>

Comments may also be addressed to the group through the OGF Security  
Area directors, for consistency:

Blair Dillaway <blaird at microsoft.com>
David Groep <davidg at nikhef.nl>

My own role is minor; I've been participating in these calls but  
could use some help from the community, as the considerations in  
producing these range over many topics of potentially wide interest.   
The goal is worthwhile, I think:  to identify and articulate a simple  
and cleanly defined set of profiles and their protocols that  
collectively would allow MUCH better interoperability and  
functionality for the use of different authentication methods in the  
field, and to back these up with use cases drawn from legitimate real- 
world needs.

Please communicate with the above people if you wish to participate.   
Relevant information can also be obtained from the archives of, and/ 
or by joining, the OGSA-WG mailing list:

http://www.ogf.org/mailman/listinfo/ogsa-wg

We hope to hear from many of you.

Best wishes,

Alan Sill, Ph.D
TIGRE Senior Scientist, High Performance Computing Center
Adjunct Professor of Physics
TTU

====================================================================
:  Alan Sill, Texas Tech University  Office: Admin 233, MS 4-1167  :
:  e-mail: Alan.Sill at ttu.edu   ph. 806-742-4350  fax 806-742-4358  :
====================================================================