Recently I have been trying to review the options for mapping UK-Federation identities to X509 Proxy certificates. This has been motivated by the observation that many of our potential users have UK-Federation identities but the ability to delegate proxy certificates make them a very useful technogy for building portals and other tools.
Some thoughts on the e-Infrastructure requirements for supporting Virtual
Organisations.
A Virtual Organisation (VO) is one that intersects with multiple real
organisation. It is comprised of users from multiple home
institutions. Many of which may be entirely unaware of the existence
of the VO at all. This means that the Virtual Organisation needs to
be self-organising and must be provided with the tools to manage its
own membership.
One of the potential problems we have identified with AuthN tools like UK-Federation and Moonshot is that they (for good reasons) generate a different identifier for each service domain.
