opengeospatial / ideas

Public repository for Innovation Program Ideas
20 stars 3 forks source link

Demonstration of fine-grained authorization based on OIDC or UMA standards #55

Open jjdp-dms opened 6 years ago

jjdp-dms commented 6 years ago

In OGC Testbed14 it will be demonstrated the usage of an OAuth2.0 and Open ID Connect (OIDC) Authorization Server that mainly provides authentication capabilities for users/services and also allows to set authorization settings (based on user identity) and dynamic client registration.

The mentioned feature will include demonstration of authorization setting with fine-grained based on scopes but also will demonstrate the usage of UMA (User-Managed Access) as an extended OAuth2.0 profile that allows Resource Servers (such as CSW instances) to register their resources (metadata) on a centralized authorization server (AS) for granular access.