IVOA Recommendation: SSO - Single-Sign-On Profile: Authentication Mechanisms Version 2.0

TL;DR

This paper details standardized client-server authentication mechanisms for the IVOA single-sign-on profile, referencing existing standards to ensure interoperability and security in astronomical data services.

Contribution

It defines normative rules for implementing various authentication methods within the IVOA SSO profile, enhancing security and compatibility.

Findings

Standardized authentication mechanisms specified

Normative implementation rules provided

Enhances interoperability for astronomical data access

Abstract

Approved client-server authentication mechanisms are described for the IVOA single-sign-on profile: No Authentication; HTTP Basic Authentication; TLS with passwords; TLS with client certificates; Cookies; Open Authentication; Security Assertion Markup Language; OpenID. Normative rules are given for the implementation of these mechanisms, mainly by reference to pre-existing standards. The Authorization mechanisms are out of the scope of this document.