The academic de.NBI Cloud offers compute resources for life science research in Germany. At the beginning of 2017, de.NBI Cloud started to implement a federated cloud consisting of five compute centers, with the aim of acting as one resource to their users. A federated cloud introduces multiple challenges, such as a central access and project management point, a unified account across all cloud sites and an interchangeable project setup across the federation. In order to implement the federation concept, de.NBI Cloud integrated with the ELIXIR authentication and authorization infrastructure system (ELIXIR AAI) and in particular Perun, the identity and access management system of ELIXIR. The integration solves the mentioned challenges and represents a backbone, connecting five compute centers which are based on OpenStack and a web portal for accessing the federation.This article explains the steps taken and software components implemented for setting up a federated cloud based on the collaboration between de.NBI Cloud and ELIXIR AAI. Furthermore, the setup and components that are described are generic and can therefore be used for other upcoming or existing federated OpenStack clouds in Europe.
[1]
John Hughes,et al.
Security Assertion Markup Language (SAML) 2.0 Technical Overview
,
2004
.
[2]
Ludek Matyska,et al.
Perun — Modern approach for user and service management
,
2014,
2014 IST-Africa Conference Proceedings.
[3]
Luiz Fernando Bittencourt,et al.
A survey on cloud federation architectures: Identifying functional and non-functional properties
,
2016,
J. Netw. Comput. Appl..
[4]
Alexander Sczyrba,et al.
Common ELIXIR Service for Researcher Authentication and Authorisation
,
2018,
F1000Research.
[5]
Dick Hardt,et al.
The OAuth 2.0 Authorization Framework
,
2012,
RFC.
[6]
Jan De Clercq,et al.
Single Sign-On Architectures
,
2002,
InfraSec.