BEGIN:VCALENDAR
VERSION:2.0
PRODID:Linklings LLC
BEGIN:VTIMEZONE
TZID:America/Chicago
X-LIC-LOCATION:America/Chicago
BEGIN:DAYLIGHT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
TZNAME:CDT
DTSTART:19700308T020000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=2SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
TZNAME:CST
DTSTART:19701101T020000
RRULE:FREQ=YEARLY;BYMONTH=11;BYDAY=1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTAMP:20190731T213557Z
LOCATION:Crystal Foyer and Crystal B
DTSTART;TZID=America/Chicago:20190730T183000
DTEND;TZID=America/Chicago:20190730T203000
UID:pearc_PEARC19_sess157_pos130@linklings.com
SUMMARY:SciTokens: Demonstrating Capability-Based Access to Remote Scienti
 fic Data using HTCondor
DESCRIPTION:SciTokens: Demonstrating Capability-Based Access to Remote Sci
 entific Data using HTCondor\n\nWithers, Bockelman, Weitzel, Brown, Patton.
 ..\n\nThe management of security credentials (e.g., passwords, secret keys
 ) for computational science workflows is a burden for scientists and infor
 mation security officers. Problems with credentials (e.g., expiration, pri
 vilege mismatch) cause workflows to fail to fetch needed input data or sto
 re valuable scientific results, distracting scientists from their research
  by requiring them to diagnose the problems, re-run their computations, an
 d wait longer for their results. SciTokens introduces a capabilities-based
  authorization infrastructure for distributed scientific computing, to hel
 p scientists manage their security credentials more reliably and securely.
  SciTokens uses IETF-standard OAuth JSON Web Tokens for capability-based s
 ecure access to remote scientific data. These access tokens convey the spe
 cific authorizations needed by the workflows, rather than general-purpose 
 authentication impersonation credentials, to address the risks of scientif
 ic workflows running on distributed infrastructure including NSF resources
  (e.g., LIGO Data Grid, Open Science Grid, XSEDE) and public clouds (e.g.,
  Amazon Web Services, Google Cloud, Microsoft Azure). By improving the int
 eroperability and security of scientific workflows, SciTokens 1) enables u
 se of distributed computing for scientific domains that require greater da
 ta protection and 2) enables use of more widely distributed computing reso
 urces by reducing the risk of credential abuse on remote systems.\n\nIn th
 is extended abstract, we present the results over the past year of our ope
 n source implementation of the SciTokens model and its deployment in the O
 pen Science Grid, including new OAuth support added in the HTCondor 8.8 re
 lease series.\n\nPosters\nReception, Poster
URL:https://pearc19.conference-program.com/presentation/?id=pos130&sess=se
 ss157
END:VEVENT
END:VCALENDAR