JGridstart/Confusa

<sidebar>

• jGridstart
  • JGridstart|Home
  • JGridstart/Help|Help
  • JGridstart/Support|Support
• jGridstart for ...
  • JGridstart/Certificate_Authorities|Certificate Authorities
  • JGridstart/Developers|Developers

</sidebar>To avoid manual passport checks during identity vetting, Terena has introduced the Confusa online certificate service. In this way, users can login at their home institution and retrieve a grid certificate in minutes. This is a form of online identity vetting.

jGridstart does not yet support this, but this is work in pogress. There have been some problems though as how to work with this to obtain a smooth user-experience. Besides that, Confusa has not fully implemented the REST-API, we are waiting for that (while trying to find time to submit a patch). For now, development of the Confusa connection is somewhat stalled.

OAuth

Confusa has implemented OAuth 1.0a so for external applications to retrieve a certificate. The user logs into Confusa, and from there jGridstart can be started with an OAuth access token. Still the user needs to confirm that jGridstart is allowed to retrieve the certificate from the Confusa website, which requires web browser interaction. This is bad for user-experience.

Links

• OAuth 2 for native apps
• Confusa's REST-API