[Fiware-webui] Access Control for POI

[Stefan Lemme]

Hi,

have a look at these two GEs:

  * PEP Proxy - Wilma
    http://catalogue.fiware.org/enablers/pep-proxy-wilma
  * Authorization PDP - AuthZForce (formerly Access Control GE)
    http://catalogue.fiware.org/enablers/authorization-pdp-authzforce

As far as I understood, they just require a dedicated setup of few GEs 
(PEP, PDP, IDM, and backend) to enhance any backend service (i.e. 
POI-DP) with authentication and fine-grained authorization. Probably a 
blueprint might be a good choice here.

Best regards,
Stefan


On 1/20/2016 1:30 AM, Toni Alatalo wrote:
> good point, the KeyRock authentication has been reportedly one of the 
> popular GEs in at least some of the accelerators (I think this was for 
> CreatiFI but would not be surprised about it for others either). AFAIK 
> it's an OAuth2 thing.
>
> Erno here checked it a bit for one project (where we did not end up 
> using that now, but do have CB & the openstack swift object storage 
> thing GEs) .. IIRC seemed fine.
>
> ~Toni
>
> On Tue, Jan 19, 2016 at 11:01 PM, Philipp Slusallek 
> <philipp.slusallek at dfki.de <mailto:philipp.slusallek at dfki.de>> wrote:
>
>     Hi Ari,
>
>     I saw that you are starting to work on Access Control for POI
>     (https://jira.fiware.org/browse/WEB-799) but you seem to plan using a
>     Google service for that.
>
>     FIWARE actually has its own Securiity chapter, which has a pretty good
>     (as far as I know and what I hear) access control enabler. I think it
>     would not be good if you do not at least strongly consider using this.
>
>     You might even be able to use the service in FIWARE Lab without having
>     to set anything yourself. Does anyone have experience with that in the
>     group? I am adding Stefan, who might know some more from FI-Content.
>
>
>     This actually brings me to another point that it might be necessary to
>     eventually add such a component also to a few other of our
>     services. So
>     it might be helpful to explore this also as a group.
>
>     This could be a good topic for the call tomorrow. Unfortunately, I
>     will
>     be traveling tomorrow and will not be able to join, sorry.
>
>
>     Best,
>
>             Philipp
>     --
>
>     -------------------------------------------------------------------------
>     Deutsches Forschungszentrum für Künstliche Intelligenz (DFKI) GmbH
>     Trippstadter Strasse 122, D-67663 Kaiserslautern
>
>     Geschäftsführung:
>       Prof. Dr. Dr. h.c. mult. Wolfgang Wahlster (Vorsitzender)
>       Dr. Walter Olthoff
>     Vorsitzender des Aufsichtsrats:
>       Prof. Dr. h.c. Hans A. Aukes
>
>     Sitz der Gesellschaft: Kaiserslautern (HRB 2313)
>     USt-Id.Nr.: DE 148646973, Steuernummer:  19/673/0060/3
>     ---------------------------------------------------------------------------
>
>     Since January 1st, old domains won't be supported and messages
>     sent to any domain different to @lists.fiware.org
>     <http://lists.fiware.org> will be lost.
>     Please, send your messages using the new domain
>     (Fiware-webui at lists.fiware.org
>     <mailto:Fiware-webui at lists.fiware.org>) instead of the old one.
>     _______________________________________________
>     Fiware-webui mailing list
>     Fiware-webui at lists.fiware.org <mailto:Fiware-webui at lists.fiware.org>
>     https://lists.fiware.org/listinfo/fiware-webui
>
>
>
>
> Since January 1st, old domains won't be supported and messages sent to any domain different to @lists.fiware.org will be lost.
> Please, send your messages using the new domain (Fiware-webui at lists.fiware.org) instead of the old one.
> _______________________________________________
> Fiware-webui mailing list
> Fiware-webui at lists.fiware.org
> https://lists.fiware.org/listinfo/fiware-webui

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-webui/attachments/20160120/f35a21ee/attachment.html>