# Authentication and Authorization for Global Research Infrastructure (Lecture)

- Institution: CERN
- Speaker: Donald Chung
- Year: 2026
- Language: English
- Subjects: Computer science
- Source: [CERN](https://videos.cern.ch/record/3023652)
- Licence: [CERN](https://copyright.web.cern)
- Who can watch: Tweens profiles and older (sources give no ratings; placed by Invisible Network from the source's own words)

In today's interconnected world, authentication and authorization have become critical components of modern research infrastructure. This lecture will begin by exploring traditional methods, such as certificate-based authentication, before progressing to how initiatives like **WLCG**, **IRIS** (UK computing resource federation) and **SKA SRCNet** (Square Kilometre Array - SKA Regional Centres Network) leverage industry-standard, token-based **Authentication and Authorization Infrastructure** (AAI) to enable large-scale research federations.

Next, we will examine how modernised certificate-based PKI (Public Key Infrastructure) can complement token-based systems, creating a secure and user-friendly approach for accessing research resources. This hybrid model ensures both flexibility and robustness in managing identity and access across global collaborators.

The practical exercise will give attendees hands-on experience deploying a token issuer and a certificate authority using Kubernetes Helm charts. Participants will:

1. Obtain a token from the issuer and analyse its content to understand the underlying architecture. 2. Issue a certificate and explore how token information translates into certificate issued via automated certificated issuer and how the 2 technologies can be bridged. 3. Use the issued certificate to access research resources in a simulated environment, demonstrating secure and streamlined access workflows.

By the end of the session, attendees will gain both conceptual understanding and practical skills for implementing modern AAI solutions in global research infrastructures.

00:00:00 Slide 1

00:00:13 Slide 2

00:02:29 Slide 3

00:03:20 Slide 4

00:03:38 Slide 5

00:04:09 Slide 6

00:04:53 Slide 7

00:05:41 Slide 8

00:06:28 Slide 9

00:06:46 Slide 10

00:07:20 Slide 11

00:07:33 Slide 12

00:07:53 Slide 13

00:08:03 Slide 14

00:09:41 Slide 15

00:10:04 Slide 16

00:10:41 Slide 17

00:11:31 Slide 18

00:12:25 Slide 19

00:13:38 Slide 20…

## Lectures

1. [Authentication and Authorization for Global Research Infrastructure (Lecture)](https://invisiblenetwork.ai/learn/cern/3023652/8bc2e8c56b53), 57 min (CERN's player)