The EIDA Authentication System: a federated approach to AAI for the scientific community

<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#"> <head> <meta charset="utf-8" /> <script type="text/javascript">window.dataLayer = window.dataLayer || []; window.dataLayer.push({ 'ad_storage': 'denied', 'analytics_storage': 'denied', 'personalization_storage': 'denied', 'logged-in': 'false', 'drupal-role':'anonymous' });</script> <script type="text/javascript">(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-K5T7KBF');</script> <meta name="description" content="EIDA is a collaborative network of seismological data centres aimed at securely storing seismic waveform data and metadata collected by European research infrastructures. Established over a decade ago, the federation now comprises 12 European data centres, with two more expected to join in the coming months." /> <link rel="canonical" href="https://www.eudat.eu/use-cases/the-eida-authentication-system-a-federated-approach-to-aai-for-the-scientific-community" /> <meta name="Generator" content="Drupal 9 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM" crossorigin="anonymous"></script> <link rel="icon" href="/themes/eudat/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css" integrity="sha512-1ycn6IcaQQ40/MKBW2W4Rhis/DbILU74C1vSrLJxCq57o941Ym01SwNsOMqvEBFlcgUa6xLiPY/NS5R+E6ztJQ==" crossorigin="anonymous" referrerpolicy="no-referrer" /> <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous" /> <title>The EIDA Authentication System: a federated approach to AAI for the scientific community | EUDAT</title> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/ajax-progress.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/autocomplete-loading.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/progress.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/sticky-header.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tabledrag.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tree-child.module.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/modules/custom/trust_ppg/css/main.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/modules/custom/trust_ppg/css/modal.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/modules/contrib/ckeditor_accordion/css/accordion.frontend.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/bootstrap/bootstrap.min.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/aos/aos.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/animatecss/animatecss.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/swiper/swiper.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/fontawesome/css/all.min.css?sl2zxh" /> <link rel="stylesheet" media="all" href="/themes/eudat/css/style.min.css?sl2zxh" /> </head> <body class="layout-no-sidebars path-node page-node-type-revamped-eudat-communities"> <a href="#main-content" class="visually-hidden focusable skip-link"> </a> <noscript aria-hidden="true"><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-K5T7KBF" height="0" width="0" style="display:none;visibility:hidden;"></iframe> </noscript> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div id="page internal"> <header class="page_header headerInternal"> <div class="container"> <div class="row align-items-center" > <div class="col-md-3 col-10"> <a href="/" rel="home"><img src="/themes/eudat/Logo_EUDAT_payoff.png" alt="Home" class="brand_logo"></a> </div> <div class="menu_btn_wrap col-2"> <i class="fa-solid fa-bars" id="menu-activator"></i> </div> <div class="col-md-9"> <div class="menu_wrap"> <div class="region region-primary-menu"> <nav role="navigation" aria-labelledby="block-eudat-main-menu-menu" id="block-eudat-main-menu"> <h2 class="visually-hidden" id="block-eudat-main-menu-menu">Main navigation</h2> <ul class="navigation__menu navigation--level-1"> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="node/863">About</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/863">EUDAT CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://eudat.eu/sites/default/files/2024-01/EUDAT%20Visual%20Guidelines%20WEB%20Jan2024%20%281%29.pdf" class="navigation__link navigation__link--level-2">Logos & branding guidelines</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-members" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1535">Members</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-governance" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1269">Governance</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/how-to-join-the-eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/894">How to join the CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-in-the-eu-landscape" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/935">EUDAT in the EU landscape</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Contact us</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/catalogue" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="catalogue">Services & Support</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/catalogue" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="catalogue">Service Catalogue</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-training" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/639">Training</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://docs.eudat.eu/" class="navigation__link navigation__link--level-2">User Documentation</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Help Desk</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1"> <a href="/use-cases" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="use-cases">Use Cases</a> </li> <li class="navigation__item navigation__item--level-1"> <a href="/projects" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="projects">Projects</a> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children navigation__item--last"> <a href="" class="navigation__link navigation__link--level-1">Events & Media</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/events" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="events">Events</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/news" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1526">News</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/webinars" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1360">Webinars</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="https://www.youtube.com/channel/UCFHDkectxe9K_n_MyA1ax3Q" class="navigation__link navigation__link--level-2">Videos</a> </li> </ul> </li> </ul> </nav> </div> </div> </div> </div> </div> </header> <header class="page_header headerInternal stickyMenu container-fluid" id="stickyMenu"> <div class="row align-items-center"> <div class="col-md-3 col-10"> <a href="/" rel="home"><img src="/themes/eudat/Logo_EUDAT_payoff.png" alt="Home" class="brand_logo"></a> </div> <div class="menu_btn_wrap col-2"> <i class="fa-solid fa-bars" id="menu-activator"></i> </div> <div class="col-md-9"> <div class="menu_wrap"> <div class="region region-primary-menu"> <nav role="navigation" aria-labelledby="block-eudat-main-menu-menu" id="block-eudat-main-menu"> <h2 class="visually-hidden" id="block-eudat-main-menu-menu">Main navigation</h2> <ul class="navigation__menu navigation--level-1"> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="node/863">About</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/863">EUDAT CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://eudat.eu/sites/default/files/2024-01/EUDAT%20Visual%20Guidelines%20WEB%20Jan2024%20%281%29.pdf" class="navigation__link navigation__link--level-2">Logos & branding guidelines</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-members" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1535">Members</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-governance" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1269">Governance</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/how-to-join-the-eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/894">How to join the CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-in-the-eu-landscape" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/935">EUDAT in the EU landscape</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Contact us</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/catalogue" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="catalogue">Services & Support</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/catalogue" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="catalogue">Service Catalogue</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-training" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/639">Training</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://docs.eudat.eu/" class="navigation__link navigation__link--level-2">User Documentation</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Help Desk</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1"> <a href="/use-cases" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="use-cases">Use Cases</a> </li> <li class="navigation__item navigation__item--level-1"> <a href="/projects" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="projects">Projects</a> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children navigation__item--last"> <a href="" class="navigation__link navigation__link--level-1">Events & Media</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/events" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="events">Events</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/news" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1526">News</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/webinars" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1360">Webinars</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="https://www.youtube.com/channel/UCFHDkectxe9K_n_MyA1ax3Q" class="navigation__link navigation__link--level-2">Videos</a> </li> </ul> </li> </ul> </nav> </div> </div> </div> </div> </header> <div class="mobile-menu" id="prim_menu_container-mobile" data-attributes="menu_mobile"> <div class="background"></div> <i class="fa-solid fa-xmark close-menu"></i> <div class="region region-primary-menu"> <nav role="navigation" aria-labelledby="block-eudat-main-menu-menu" id="block-eudat-main-menu"> <h2 class="visually-hidden" id="block-eudat-main-menu-menu">Main navigation</h2> <ul class="navigation__menu navigation--level-1"> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="node/863">About</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/863">EUDAT CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://eudat.eu/sites/default/files/2024-01/EUDAT%20Visual%20Guidelines%20WEB%20Jan2024%20%281%29.pdf" class="navigation__link navigation__link--level-2">Logos & branding guidelines</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-members" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1535">Members</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/cdi-governance" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1269">Governance</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/how-to-join-the-eudat-cdi" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/894">How to join the CDI</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-in-the-eu-landscape" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/935">EUDAT in the EU landscape</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Contact us</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children"> <a href="/catalogue" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="catalogue">Services & Support</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/catalogue" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="catalogue">Service Catalogue</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/eudat-training" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/639">Training</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="https://docs.eudat.eu/" class="navigation__link navigation__link--level-2">User Documentation</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="/contact-support-request" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/154">Help Desk</a> </li> </ul> </li> <li class="navigation__item navigation__item--level-1"> <a href="/use-cases" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="use-cases">Use Cases</a> </li> <li class="navigation__item navigation__item--level-1"> <a href="/projects" class="navigation__link navigation__link--level-1" data-drupal-link-system-path="projects">Projects</a> </li> <li class="navigation__item navigation__item--level-1 navigation__item--has-children navigation__item--last"> <a href="" class="navigation__link navigation__link--level-1">Events & Media</a> <ul class="navigation__sub-menu navigation--level-2"> <li class="navigation__item navigation__item--level-2"> <a href="/events" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="events">Events</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/news" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1526">News</a> </li> <li class="navigation__item navigation__item--level-2"> <a href="/webinars" class="navigation__link navigation__link--level-2" data-drupal-link-system-path="node/1360">Webinars</a> </li> <li class="navigation__item navigation__item--level-2 navigation__item--last"> <a href="https://www.youtube.com/channel/UCFHDkectxe9K_n_MyA1ax3Q" class="navigation__link navigation__link--level-2">Videos</a> </li> </ul> </li> </ul> </nav> </div> </div> <div id="main-wrapper" class="layout-main-wrapper mb-5 pb-5"> <div id="main" class="container"> <div class="breadcrumb"> <div class="region region-breadcrumb"> <div id="block-eudat-breadcrumbs" class="block block-system block-system-breadcrumb-block"> <div class="content"> <nav role="navigation" aria-labelledby="system-breadcrumb"> <h2 id="system-breadcrumb" class="visually-hidden">Breadcrumb</h2> <ol> <li> <a href="/">Home</a> </li> <li> <a href="/use-cases">Use Cases</a> </li> <li> The EIDA Authentication System: a federated approach to AAI for the scientific community </li> </ol> </nav> </div> </div> </div> </div> <div class="page-title"> <div class="region region-page-title"> <div id="block-eudat-page-title" class="block block-core block-page-title-block"> <div class="content"> <h1 class="title page-title"> <span>The EIDA Authentication System: a federated approach to AAI for the scientific community</span> </h1> </div> </div> </div> </div> <div id="content" class="content content-full pt30 pb60"> <div class="container container-bg"> <div class="content-main-inner"> <div class="row"> <div id="page-main-content" class="main-content col-xl-12 col-lg-12 col-md-12 col-sm-12 col-xs-12 order-xl-2 order-lg-2 order-md-1 order-sm-1 order-xs-1 "> <div class="main-content-inner"> <div class="content-main"> <div class="region region-content"> <div id="block-eudat-specialone-system-main" class="block block-system block-system-main-block"> <div class="content"> <article data-history-node-id="1534" role="article" class="node node--type-revamped-eudat-communities node--promoted node--view-mode-full clearfix mb-5"> <header> </header> <div class="node__content clearfix"> <div class="row use-case-node"> <div class="col-12 col-md-4"> <div class="card-use-cases-hp"> <div class="card"> <div class="card-img"> <img loading="lazy" src="/sites/default/files/seismological-data.jpg" width="5196" height="3464" alt="" /> </div> <div class="card-body"> <div class="organisation"> <a href="https://geofon.gfz-potsdam.de/eas/" target="_blank"> <h3>Organisation name</h3> <img loading="lazy" src="/sites/default/files/gfz-eida.png" width="1684" height="856" alt="" /> </a> <a href="https://geofon.gfz-potsdam.de/eas/" class="link-primary icon-right outbound" target="_blank">Learn more</a> </div> <hr> <div class="service"> <h3>EUDAT Services</h3> <a href="/service-catalogue/b2access"> <img src="https://www.eudat.eu/sites/default/files/B2ACCESS_Cube_0_0.png" alt="Service Image"> </a> </div> <hr> <div class="contacts"> <h3>Contacts</h3> <div class="form-item"> <div>Javier Quinteros - javier@gfz-potsdam.de</div> </div> </div> </div> </div> </div> </div> <div class="col-12 col-md-8"> <div class="body"> <h3> Overview </h3> <p>EIDA is a collaborative network of seismological data centres aimed at securely storing seismic waveform data and metadata collected by European research infrastructures. Established over a decade ago, the federation now comprises 12 European data centres, with two more expected to join in the coming months.</p><p>While EIDA's data can be accessed either by smart clients or programmatically via a standard API at each data centre, this initially posed a challenge for users who needed to know which centre hosted a specific dataset. This issue was resolved with the creation of a Routing Service. This service automatically directs smart clients to the appropriate data centre, effectively creating the impression of a single, unified virtual data centre for the user.</p> <h3> The Scientific Challenge </h3> <p>In Europe, EIDA rapidly emerged as the go-to platform for sharing seismic waveforms within the seismological community. Enhanced Data Management Policies allowed for early-stage archiving of datasets, such as during embargo periods, with restricted user access until the data became fully open. Initially, individual data centres managed user permissions through their own access control lists.</p><p>However, the advent of European Projects generating large datasets, which required archiving across multiple data centres, presented a challenge. Managing user permissions through a single data centre became untenable. To address this, EIDA sought a technical solution for federated authentication. This eliminated the need to synchronise access control lists among various data centres, reducing security risks, potential GDPR violations, and multiple points of failure.</p> <h3> Who benefits and how? </h3> <p>The service outlined in this use case is available to any member of the seismological community for accessing restricted datasets. Although its use is entirely optional, nearly 600 users are registered and actively using the service. We encourage its adoption even for open data, as it enhances our statistical analysis and provides insights into dataset usage patterns.</p><p>Through this system, users can obtain a token from the EIDA Authentication Service (EAS). The EAS then communicates with a backend B2ACCESS instance to generate the token. Users can save this token locally and use any of the smart clients to access both open and restricted datasets seamlessly.</p> <h3> Technical Implementation </h3> <p>The German Research Centre for Geosciences (GFZ) initiated the development of the EIDA Authentication System (EAS) between 2016 and 2017. The EAS features a straightforward web interface allowing users to request a personal token for accessing EIDA services. Behind the scenes, EAS connects to the B2ACCESS service hosted by Forschungszentrum J眉lich (FZJ). Through B2ACCESS, users can authenticate by logging in via their home institutions, facilitated by the global eduGAIN initiative.</p><p>Upon successful login, the system returns basic user attributes. One key advantage of using B2ACCESS and eduGAIN is the flexibility it offers in terms of data privacy; users and institutions can decide how much information to share, in compliance with varying regulations like GDPR.</p><p>The EAS then issues a digitally signed token to the user, incorporating additional authorisation details through FZJ's "upman" solution. This graphical interface enables the management of user groups and their respective permissions. When the frontend receives these comprehensive user attributes, it already contains all the information needed to grant or deny access to datasets.</p><p>This interface for managing federated access control lists is user-friendly and can be operated by anyone responsible for the task, from data centre operators to researchers publishing restricted datasets. Changes are automatically updated across all data centres upon the release of a new token.</p><p>This system has enabled us to offer a complete federated authentication and authorisation solution across all our European data centres. The approach has garnered interest from significant data centres outside Europe and is being adopted internationally, potentially setting the stage for a future global standard through our International Federation of Digital Seismograph Networks (FDSN).</p> </div> </div> </div> </div> </article> </div> </div> </div> </div> </div> </div>     </div> </div> </div> </div> </div> </div> <footer class="footer page_footer"> <div class="container"> </div> <img class="separator2_up" src="/themes/eudat/images/separator3_up.svg" alt=""/> <div class="bg-dark pb-5"> <div class="container"> <div class="row mobile-gap"> <div class="col-md-4"> <div class="region region-footer-first"> <div id="block-eudat-specialone-block-64" class="block block-block-content block-block-contentb8371d77-03d0-413c-be7b-492dccb4a5ab"> <div class="content"> <h2 class="block-title text-color-white">EUDAT CDI</h2> <p>EUDAT CDI is a pan-European network consisting of more than 25 research organisations, data and computing centers.</p> </div> </div> <div id="block-eudat-specialone-block-17" class="block block-block-content block-block-contentd01efb15-9247-42a3-9ddf-d5fdbf469a11"> <div class="content"> <br> <img src="/themes/eudat/logo-white.svg" width="100%"> </div> </div> </div> </div> <div class="col-md-2"> <div class="region region-footer-second"> <div id="block-eudat-specialone-block-63" class="block block-block-content block-block-content8533b089-c5e0-4f64-af37-4afbbf96b7bb"> <div class="content"> <div class="item-footer"><h2 class="block-title text-color-white text-color-grayDark1">EUDAT Ltd</h2><p><strong>CONTACTS</strong><br /><a href="mailto:info@eudat.eu">info@eudat.eu</a><br />EUDAT Ltd<br />Keilaranta 14<br />02150 Espoo<br />Finland,<br />VAT number: FI 28953559</p></div> </div> </div> </div> </div> <div class="col-md-6"> <div class="region region-footer-third"> <div id="block-blockfooter3" class="block block-block-content block-block-content80bb8917-19bd-4702-82f4-d8954cd23cfb"> <div class="content"> <div class="text-end"> <div class="privacy"> <a href="https://www.eudat.eu/eudat-cdi-aup" target="_blank" class="text-color-theme">EUDAT AUP</a> <a href="/privacy-policy-summary" target="_blank" class="text-color-theme">Privacy Policy</a> <a href="/accessibility-statement" class="text-color-theme">Accessibility Statement</a> <a href="/frequently-asked-questions" class="text-color-theme">FAQs</a> </div> <div class="social-footer d-flex"> <a target="_blank" href="https://twitter.com/Eudat_eu"><i class="fa-brands fa-x-twitter"></i></i></a> <a target="_blank" href="http://www.slideshare.net/EUDAT/"><i class="fa-brands fa-slideshare"></i></a> <a target="_blank" href="https://www.youtube.com/user/EUDATTraining"><i class="fa-brands fa-youtube"></i></i></a> <a target="_blank" href="https://www.linkedin.com/company/eudat/"><i class="fa-brands fa-linkedin-in"></i></i></a> </div> </div> </div> </div> </div> </div> </div> </div> </div> </footer> </div> </div> <span class="c-scrollbar"></span> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"node\/1534","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"trust_ppgm":{"general_popup_data":{"gtm_cid":"GTM-K5T7KBF","popup_label":"We value your privacy","popup_link_label":"Read the full privacy policy","popup_text":"\u003Cp\u003ECookies consist of portions of code installed in the browser that assist the owner in providing the service based on the purposes described. To continue with navigation, it is required to accept at least the technical cookies. Other cookies are optional and require the user\u0027s consent. When the installation of cookies takes place on the basis of consent, this consent can be revoked freely at any time following the instructions contained in this document.\u003C\/p\u003E","policy_form_url":"\/ppgm-privacy-policy-full"},"policy_popup_data":{"terms_of_use":{"guid":"866"},"privacy":{"guid":"552"},"technical_cookies":{"guid":"551","popup_label":"Strictly Necessary Cookies","popup_text":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information."},"measurement_cookies":{"guid":"553","popup_label":"Measurement","popup_text":"These trackers help us to measure traffic and analyze your behavior with the goal of improving our service."}},"project_pk":"48"},"ckeditorAccordion":{"accordionStyle":{"collapseAll":null,"keepRowsOpen":null,"animateAccordionOpenAndClose":1,"openTabsWithHash":1}},"user":{"uid":0,"permissionsHash":"274c4e2ba62507cacb88ed8039183ff85b9ec564bbfdff1f8445da38f7938ff3"}}</script> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.6.3"></script> <script src="/core/misc/polyfills/element.matches.js?v=9.5.11"></script> <script src="/core/assets/vendor/once/once.min.js?v=1.0.1"></script> <script src="/core/misc/drupalSettingsLoader.js?v=9.5.11"></script> <script src="/core/misc/drupal.js?v=9.5.11"></script> <script src="/core/misc/drupal.init.js?v=9.5.11"></script> <script src="/themes/eudat/script/swiper/swiper.js?v=9.5.11"></script> <script src="/themes/eudat/script/aos/aos.js?v=9.5.11"></script> <script src="/themes/eudat/script/main.js?v=9.5.11"></script> <script src="/themes/eudat/script/bootstrap/bootstrap.min.js?sl2zxh"></script> <script src="/themes/eudat/theme?sl2zxh"></script> <script src="/modules/custom/trust_ppg/js/classes/Consent.js?v=1.x"></script> <script src="/modules/custom/trust_ppg/js/classes/Cookies.js?v=1.x"></script> <script src="/modules/custom/trust_ppg/js/controllers/gtm.js?v=1.x"></script> <script src="/modules/custom/trust_ppg/js/classes/Modal.js?v=1.x"></script> <script src="/modules/custom/trust_ppg/js/controllers/modal.js?v=1.x"></script> <script src="/modules/contrib/ckeditor_accordion/js/accordion.frontend.min.js?sl2zxh"></script> </body> </html>

CINXE.COM

The EIDA Authentication System: a federated approach to AAI for the scientific community | EUDAT