arrow
Return

Adding Federated Identity Management to OpenStack

delete2013-12-05
delete42
delete
OA
AI
D
David Chadwick *
K
Kristy Siu
C
Craig A. Lee
Y
Yann Fouillat
D
Damien Germonville
DOI:10.1007/s10723-013-9283-2delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
OpenStack is an open source cloud computing project that is enjoying wide. While many cloud deployments may be stand-alone, it is clear that secure federated community clouds, i.e., inter-clouds, are needed. Hence, there must be methods for federated identity management (FIM) that enable authentication and authorisation to be flexibly enforced across federated environments. Since there are many different FIM protocols either in use or in development today, this paper addresses the goal of adding protocol independent federated identity management to the OpenStack services. After giving a motivating example for secure cloud federation, and describing the conceptual design for protocol independent federated access, a detailed federated identity protocol sequence is presented. The paper then describes the implementation of the protocol independent system components, along with the incorporation of two different FIM protocols, namely SAML and Keystone proprietary. Finally performance measurements of the protocol independent components, and the two different protocols dependent components are presented, before the paper concludes with the current limitations.
Keywords:
Federated identity management
Federated access
OpenStack
Cloud

Journal

Journal of Grid Computing cover
Journal of Grid Computing
IF:
2.9
Papers:
761
Citations:
1.2K

Organization

A
aerospace corporation - usa
Scholars:
628
Papers: 397
Citations: 0
U
University of Kent
Scholars:
5.3K
Papers: 6.1K
Citations: 8.1K
Cited Papers

Cited Papers

Population Distribution, Settlement Patterns and Accessibility across Africa in 2010
err2012-02-21
err0
errOAAI
errCatherine Linard; Marius Gilbert; Robert W. Snow; Abdisalan M. Noor; Andrew J. Tatem
errShare
errSave
Virtual organization support within a grid-wide operating system
err2008-03-01
err16
PREAI
errCoppola, Massimo; Jegou, Yvon; Matthews, Brian; Morin, Christine; Prieto, Luis Pablo; Sanchez, Oscar David; Yang, Erica Y.; Yu, Haiyan
errShare
errSave
Using social media for collaborative species identification and occurrence
err2012-11-06
err0
PREAI
errDong-Po Deng; Tyng-Ruey Chuang; Kwang-Tsao Shao; Guan-Shuo Mai; Te-En Lin; Rob Lemmens; Cheng-Hsin Hsu; Hsu-Hong Lin; Menno-Jan Kraak
errShare
errSave
Selenium- and tellurium-containing redox modulators with distinct activity against macrophages: possible implications for the treatment of inflammatory diseases
err2012-12-01
err0
PREAI
errMandy Doering; Britta Diesel; Martin C.H. Gruhlke; Uma M. Viswanathan; Dominika Mániková; Miroslav Chovanec; Torsten Burkholz; Alan J. Slusarenko; Alexandra K. Kiemer; Claus Jacob
errShare
errSave
errShare
errSave
researcher View more