This one-day course is an introduction to the next generation identity management and authorisation protocols and their constituent components (OAuth2/JW*/OIDC/UMA).

The second part of the programme includes a more practical look at relevant tools and libraries (in Python and/or Java).

Who is it for?: Developers of resources for web and mobile will especially benefit from this course.

Learning objectives:

  • Understand the principles of OIDC and OAuth2
  • How to choose the OIDC most appropriate authentication flow for each use case
  • Know how to move in the official documentation
  • Implement an OIDC Resource Provider both with software libraries and with HTTP server modules

Trainers: Andrea Biancini, Davide Vaghetti

How to reach GARR >>

Costs: AARC2 project participants can claim travel and accommodation expenses on the project budget, as well as person-hours for time spent.

! Ask your task or activity leader for authorisation!

Requirements:

Bring your own laptop and be familiar (at least) with python development environment.

The event is organised in collaboration with GARR, the Italian National Research and Education Network.

Agenda

Tuesday, June 27

09:00 - 09:30

WELCOME & REGISTRATION

09:30 - 11:00

Theoretical session: OIDC overview, OAuth2 overview ("OpenID Connect 1.0 is a simple identity layer on top of the OAuth 2.0 protocol"), OAuth2 authorisation flows, JSON Web Token (JWT) overview

11:00 - 11:30

BREAK

11:30 - 13:00

Theoretical session: OIDC authentication flows, Outline of UMA and OIDC Federation

13:00 - 14:00

LUNCH

14:00 - 16:00

Hands-on session: Implementing and OIDC provider; implementing an OIDC RP

16:00 - 16:30

BREAK

16:30 - 18:00

Hands-on session: Review the python OP/RP implementations; Implementing an RP in php, java and through Apache & Nginx modules libraries; Modules configuration in Apache and Nginx

registered [16]
  • Andrea Biancini - Reti SpA
  • Pasquale Mandato - Consortium GARR
  • Jouke Roorda - Nikhef
  • Alberto Colla - Consortium GARR
  • Simona Venuti - Consortium GARR
  • Barbara Monticini - Consortium GARR
  • Marco Malavolti - Consortium GARR
  • Fulvio Galeazzi - Consortium GARR
  • Lalla Mantovani - Consortium GARR
  • Fabio Vitello - National Institute for Astrophysics - INAF
  • Alessandro Costa - National Institute for Astrophysics - INAF
  • IANNIELLO LUCA - CNR
  • Enrico Maria Vincenzo Fasanelli - INFN - National Institute for Nuclear Physics
  • Francesco Sansone - CNR Institute of Clinical Physiology
  • Raffaele Conte - CNR Institute of Clinical Physiology
  • Pierluigi Checchi - University of Rome Tor Vergata