Skip to main content

Integrating an AAA-based federation mechanism for OpenStack - The CLASSe view

Pérez Méndez, Alejandro, López Millán, Gabriel, Marín López, Rafael, Chadwick, David W., Schechtman Sette, Ioram (2017) Integrating an AAA-based federation mechanism for OpenStack - The CLASSe view. Concurrency and Computation: Practice and Experience, 29 (12). Article Number 4148. ISSN 1532-0626. (doi:10.1002/cpe.4148) (KAR id:61206)

Abstract

Identity federations enable users, service providers, and identity providers from different organizations to exchange authentication and authorization information in a secure way. In this paper, we present a novel identity federation architecture for cloud services based on the integration of a cloud identity management service with an authentication, authorization, and accounting infrastructure. Specifically, we analyse how this type of authentication, authorization, and accounting–based federation can be smoothly integrated into OpenStack, the leading open source cloud software solution, using the Internet Engineering Task Force (IETF) Application Bridging for Federated Access Beyond web specification for authentication and authorization. We provide details of the implementation undertaken in GÉANT's CLASSe project and show its validation in a real testbed.

Item Type: Article
DOI/Identification number: 10.1002/cpe.4148
Uncontrolled keywords: ABFAB, authorization, CLASSe, Cloud, identity federation, OpenStack
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
Funders: European Commission (https://ror.org/00k4n6c32)
Depositing User: David Chadwick
Date Deposited: 04 Apr 2017 11:33 UTC
Last Modified: 04 Mar 2024 18:40 UTC
Resource URI: https://kar.kent.ac.uk/id/eprint/61206 (The current URI for this page, for reference purposes)

University of Kent Author Information

  • Depositors only (login required):

Total unique views for this document in KAR since July 2020. For more details click on the image.