Project notes about GridShib: Grid-Shibboleth Integration (Identity Federation and Grids) April 11, 2005 Von Welch http://grid.ncsa.uiuc.edu/GridShib/presentations/GridShib-uk-april05.ppt

• Campus Grid Use Case (Campus running Grid, Shibboleth service. Users with campus-issued certificates. Maybe a few outside users. Desires to use campus attributes to authorize use of campus grid. E.g. USC)

• Grid Deployment Use Case (Multi-site Grid based around a virtual organization. Users have certificates from one or more Grid CAs, probably not run by VO. Grid wishes to establish attributes for their users to do role-based authorization. Grid is either large enough to establish and run their own Shibboleth AA or someone is willing to do it for them E.g. TeraGrid, OSG)

• Hybrid Use Case (Grid based on virtual organization but wants to make resources available to larger community E.g. Allow all chemists to access some dataset. Users have certificates from one or more Grid CAs, probably not run by VO. Want to use campus-asserted attributes, from campus-run Shibboleth services to authorize access to VO resources. Currently done by issuing light-weight Grid credentials to users via a portal. E.g. ESG)