WLCG transition from X.509 to Tokens: Progress and Outlook

Conference · Wed Jan 01 04:00:00 EST 2025 · EPJ Web Conf.

DOI:https://doi.org/10.1051/epjconf/202533701179· OSTI ID:3009878

Dack, Thomas ^[1]; Agostini, Federica ^[2]; Balci, Berk ^[3]; Doidge, Matthew ^[4]; Dykstra, Dave ^[5]; Kelsey, David ^[1]; Litmaath, Maarten ^[3]; Miccoli, Roberta ^[2]; Sallé, Mischa ^[6]; Short, Hannah ^[3]; Vianello, Enrico ^[2]

---

1. Rutherford Appleton Laboratory
2. INFN, CNAF
3. CERN
4. Lancaster U. (main)
5. Fermilab
6. Nikhef, Amsterdam

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token-based authentication and authorization throughout its entire middleware stack.Taking guidance from the WLCG Token Transition Timeline, published in 2022, substantial progress has been achieved not only in making middleware compatible with the use of tokens, but also in understanding the limitations of the WLCG Common JWT Profiles, first published in 2019. Significant scalability experience has been gained from Data Challenge 2024, during which millions of files were transferred with tokens used as credentials - a significant percentage of the total transfers completed.Besides describing the state of affairs in the transition to tokens, revisions to the WLCG token profile, and the evolving road maps, this contribution also covers the corresponding transition from VOMS-Admin to INDIGO-IAM services, with continuing improvements in terms of functionality as well as deployment.

• Research Organization: Lancaster U. (main); Fermi National Accelerator Laboratory (FNAL), Batavia, IL (United States); CERN; Nikhef, Amsterdam; INFN, CNAF; Rutherford Appleton Laboratory
• Sponsoring Organization: US Department of Energy
• DOE Contract Number: 89243024CSC000002
• OSTI ID: 3009878
• Report Number(s): FERMILAB-PUB-25-0933-CSAID; oai:inspirehep.net:3065364
• Resource Type: Conference paper
• Conference Information: Journal Name: EPJ Web Conf.
• Country of Publication: United States
• Language: English