WLCG Authorisation from X.509 to Tokens
Brian Bockelman, Andrea Ceccanti, Ian Collier, Linda Cornwall, Thomas, Dack, Jaroslav Guenther, Mario Lassnig, Maarten Litmaath, Paul Millar, Mischa, Sall\'e, Hannah Short, Jeny Teheran, Romain Wartel

TL;DR
This paper discusses the transition of WLCG's authorization infrastructure from X.509 certificates to token-based systems, highlighting the benefits, technical developments, and integration examples like Rucio.
Contribution
It presents the WLCG group's efforts and technical analysis in adopting token-based authorization, replacing traditional X.509 certificates for improved interoperability and usability.
Findings
Successful adaptation of existing AAI solutions for token-based authorization.
Development of a common token schema aligned with standards.
Implementation example of token integration in Rucio.
Abstract
The WLCG Authorisation Working Group was formed in July 2017 with the objective to understand and meet the needs of a future-looking Authentication and Authorisation Infrastructure (AAI) for WLCG experiments. Much has changed since the early 2000s when X.509 certificates presented the most suitable choice for authorisation within the grid; progress in token based authorisation and identity federation has provided an interesting alternative with notable advantages in usability and compatibility with external (commercial) partners. The need for interoperability in this new model is paramount as infrastructures and research communities become increasingly interdependent. Over the past two years, the working group has made significant steps towards identifying a system to meet the technical needs highlighted by the community during staged requirements gathering activities. Enhancement work…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
