Open jbasney opened 7 months ago
ver claim: SciTokens uses ver, WLCG uses wlcg.ver
aud
claim special value: SciTokens uses ANY
, WLCG use https://wlcg.cern.ch/jwt/v1/any
jti
claim: OPTIONAL for SciTokens, REQUIRED for WLCG tokensnbf
claim: CRITICAL (what does that mean?) for SciTokens, OPTIONAL for WLCG tokensread:/foo
and write:/foo
, WLCG use storage.read:/foo
, storage.create:/foo
, storage.modify:/foo
and storage.stage:/foo
queue
and execute
were never really usedIn case it helps: I've added CILogon to orpheus at https://orpheus.data.kit.edu/authcode/CILogon
Forgot about this relevant talk from @bbockelm : https://indico.cern.ch/event/739896/#10-scitokens-and-iam-interoper
Identify "points of harmonization" for the SciTokens profile following the AARC & WLCG example.