All Tools
- SimpleSAMLphp
- Shibboleth
- OpenConext
- Perun
- Comanage
Attribute management tools
The attribute management services store information associated with a user credential, or more user credentials. Identity providers usually provide information, attributes, to describe the user identity, where attribute providers are used by third parties to associate other, community-specific, information with a user.
Typical examples of attributes are membership to a research group, access rights to a service or a dataset orspecific roles within the collaboration.
| Tools: | VOMS | HEXAA | COmanage | Grouper | Perun | UNITY |
|---|---|---|---|---|---|---|
| Input Standard | X.509 | SAML2 | SAML (via Apache) | SQL, LDAP, XML | SAML2, X.509 | SAML2, X.509 SAML2, X.509, LDAP, OIDC |
| Output Standards | X.509, SAML | SAML2 | VOOT, LDAP, SAML (via Shib IdP) | LDAP, VOOT, SCIM, XML | SAML2, VOOT | OIDC, SAML |
Handle attribute release consent | No | Yes | No | No | No | Yes |
Membership life- cycle management | Yes | No | Yes | No | Yes | No (Planned) |
| VO Organization | Yes | Yes | Yes | Yes | Yes | Yes |
Delegated organization of the VO Groups | Yes | No | Yes | Yes | Yes | Yes |
HA deployment | Available | No | Available | Available | Partially Available | Available |
| Licence | Open Source | Open Source | Open Source | Open Source | Open Source | Open Source |
Expected level of support | Supported by INFN, bug fixes. | Supported by SZTAKI and NIIFI | Supported by Internet2 TIER, various grants, and other sources | Supported by Internet2 TIER, various grants, and other sources | S upported by CESNET and Masaryk University. Maintenance and development. | Supported by ICM, JSC and Funded by PLGrid |