# Trusted servers and MFA with OCM

- Institution: CERN
- Department: HEP Computing
- Speaker: Micke Nordin
- Year: 2024
- Language: English
- Subjects: Computer science
- Source: [CERN](https://videos.cern.ch/record/3005113)
- Licence: [CERN](http://copyright.web.cern.ch)
- Who can watch: Tweens profiles and older (sources give no ratings; placed by Invisible Network from the source's own words)

When data is sensitive, it is valuable to know who is accessing it. Multi factor authentication (MFA) aims to solve this by raising the level of assurance of an identity. We can implement MFA for a single EFSS system, but being able to signal requirements of MFA to other trusted systems, and having them honor these requirements, would be very useful.

We can implement this in two parts, one part is by having the EFSS system refuse to share to a non trusted EFSS system, this will be implementation dependent and not in scope of this discussion.

The other part is to add a capability to the OCM specification regarding MFA as well as a separate permission. The combination of these two additions to the specification will allow two EFSS systems to signal to other systems that they will honor the MFA requirements on a share, and conversely signal that a share can only be accessed by a multi factor authenticated user.

This lightning talk will highlight these ideas further and discuss these additions to the OCM specification..

0:00:00 Slide 1

0:00:08 Slide 2

0:00:15 Slide 3

0:00:21 Slide 4

0:00:28 Slide 5

0:00:34 Slide 6

0:00:41 Slide 7

0:00:47 Slide 8

0:00:54 Slide 9

0:01:01 Slide 10

0:01:07 Slide 11

0:01:14 Slide 12

0:01:20 Slide 13

0:01:27 Slide 14

0:01:33 Slide 15

0:01:40 Slide 16

0:01:47 Slide 17

0:01:53 Slide 18

0:02:00 Slide 19

0:02:06 Slide 20

0:02:13 Slide 21

0:02:19 Slide 22

0:02:26 Slide 23

0:02:33 Slide 24

0:02:39 Slide 25

0:02:46 Slide 26

0:02:52 Slide 27

0:02:59 Slide 28

0:03:05 Slide 29

0:03:12 Slide 30

## Lectures

1. [Trusted servers and MFA with OCM](https://invisiblenetwork.ai/learn/cern/3005113/135e9755b2db), 4 min (CERN's player)