[Unity-idm-discuss] Feedback from an AAI Workshop (about UNITY)

[Shiraz M. <a....@fz...>]

Hi Krzysztof,

Last week we had a workshop dedicated to AAI & IdM (as a part of the LSDMA project). Whereby Unity appears to be quite important and going to play a key role in the project. There were some initial but interesting questions by meeting participants, though:

Querying User's Attributes:
i)   Can one query a user's group information from unity "without" Web interface?
ii)  Is it only the user who can query the group information about herself or any user holding specific (privileged) role, should be allowed to do that?
iii) In addition to that, what authentication (pki, username/password) as well as saml protocol (ECP, SOAP,... etc) will be used to perform such operation?

Support for external/upstream SAML IdPs: I am aware of the fact that the support for external IdPs is imminent in the next release, which is 1.1.0. Is there a tentative timeline we can anticipate?

Group management: Are the ordinary members of a group (beside administrator) allowed to create sub-groups within?

Thanks in advance,
Shiraz
--
Ahmed Shiraz Memon
Federated Systems and Data
Jülich Supercomputing Centre (JSC)

Phone: +49 2461 61 6899<tel:%2B49%202461%2061%206899>
Fax:     +49 2461 61 6656<tel:%2B49%202461%2061%206656>


------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------