Providing flexible authorization for shared group spaces by the attribute registration system

Abstract

We add flexibility to the authorization with Shibboleth by featuring a system managing additional attributes. The system offers an interface and a database to privileged administrators. When any temporary groups or projects are created, a proper set of users are assigned to them without modifying the IdP backends.