Project Charter for Alternatives to Security Service


To maintain open-source nature associated with the security service. With Forgerock closing repo, we need to eliminate the need for reliance on community version of OpenAM/OpenDJ

Make the security service installation more user friendly and easier. Current process is cumbersome

Continue to support SAML


Consider alternatives to the OpenAM/OpenDJ security service solution to maintain features use by currently in use by existing OpenWIS versions and possibility eliminate unneeded features

Re-align security service with a well established and supported open source community

Consider WIS 2 aspects involving security when examining alternatives for security service

What’s important in an alternative:

Ease of use maintenance community support Integration with existing code base No loss of main functionality Opensource solution Run under Linux

Key dependencies to overcome: Deployment difficulty Migration an existing bulk of users to the new middleware Converting existing Openwis code to the new system


1/ A new identity and access management solution for Openwis (possibly Keycloak 2/ Documentations (installation, user, configuration) 3/ Scripts to migrate actual users/groups database to the new identity servers

Meteo-France and NOAA will lead the project. A certain portion of funding from the middleware upgrade could be apply to this effort.

Milestones & Schedule

Please list the milestones that will be needed to achieve each of the deliverables that are included within the scope of this project.

Project Milestone Begin Date End Date
Project start April 2020  
Keycloak evaluation April 2020 Summer 2020
insert milestone 2    
insert milestone n    
Project closure October 2020  

Roles and Responsibilities

Please list the people to involve or equipment (such as hardware and/or software) in this project; what their role in the project is; and what they will deliver (relate this to a milestone where relevant)

Resource Name Organisation Role What this resource will be do in relation to a listed milestone Time period resource needed for  
  Benjamin Saclier MF Technical Team member    
  Yves Goupil MF Technical Team member    
  Steve Olson NWS Technical Team member    
  Marc Giannoni NWS Technical Team member    
  Zhan Zhang NWS Technical Team member    

Communication and Reporting

A github ticket and report on the findings of this work can be found at:

Configuration Management

This was just an investigative study. The findings report can be found in: