[vc_row][vc_column width=”3/4″][vc_column_text]
LifeWatch
How LifeWatch used the AARC Blueprint Architecture to find their solution
[/vc_column_text][vc_empty_space height=”16″][vc_column_text]LifeWatch is a European Infrastructure Consortium (ERIC) providing e-Science research facilities to scientists seeking to increase our knowledge and deepen our understanding of biodiversity and ecosystem functions and services in order to support civil society in addressing key planetary challenges.
The challenge
During its ESFRI stage, LifeWatch was composed by different national initiatives working on different services and solutions for the research community. During the new ERIC stage, LifeWatch requires a solution to provide access to different services in a common way, as well as organize the different defined groups and roles.
Currently, the different LifeWatch services, Virtual Laboratories and Virtual Research Environment manage their own local users, with some exceptions that allows institutional IDs. The technology behind depends on the services, but they mainly support web-based authentication, with some exceptions using, for example, HPC resources.
This pilot activity aims to identify and enhance an existing AAI solutions to be adopted by LifeWatch ERIC as IdP, integrating already existing institutional or social identities in a federated way.
Results
During the test phase, the pilot will be integrated with the official LifeWatch portal to provide access to restricted areas as well as the Virtual Laboratories and services. The Identity Provider based on Keycloak will be integrated with already running services and Vlabs to prove that the solution fulfil the community needs.
The deployed solution has integrated different Identity Providers to manage users from different roles: Citizen Scientists (Social IDs like Google or Github), Researchers (Institutional IDs from edugain thanks to rediris SIR2 and ORCID) and administrators (Institutional IDs like IFCA SSO).
Thanks to the pilot, LifeWatchthe selected Identity Provider is being integrated with the service catalog. For those services that are not compatible with technologies like OIDC or SAML, different solutions have been identified in the context of the project, which is suitable to be integrated with the system.
The pilot has been implemented and deployed in a testbed aiming at proving that everything will work as expected. The AARC Blueprint Architecture has been used to identify which components are needed to address the pilot needs. The BPA has also been the model to define the pilot architecture, as the following schema shows:[/vc_column_text][vc_single_image image=”4637″ img_size=”large”][vc_empty_space height=”96″][/vc_column][vc_column width=”1/4″][vc_single_image image=”4638″ img_size=”medium”][vc_single_image image=”4903″ img_size=”medium”][vc_column_text css=”.vc_custom_1556696265271{margin: 10px !important;padding: 10px !important;border: 5px solid #1e73be !important;border-radius: 5px !important;}”]“We will put this Lifewatch AAI solution in production, so this will be the way to access our portal that has all our service catalogues.”
Fernando Aguilar, University of Cantabria and LifeWatch ERIC[/vc_column_text][/vc_column][/vc_row]
