Project Charter for Alternatives to Security Service

Aim

To maintain open-source nature associated with the security service. With Forgerock closing repo, we need to eliminate the need for reliance on community version of OpenAM/OpenDJ

Make the security service installation more user friendly and easier. Current process is cumbersome

Continue to support SAML

Scope

Consider alternatives to the OpenAM/OpenDJ security service solution to maintain features use by currently in use by existing OpenWIS versions and possibility eliminate unneeded features

Re-align security service with a well established and supported open source community

Consider WIS 2 aspects involving security when examining alternatives for security service

What’s important in an alternative:

Ease of use maintenance community support Integration with existing code base No loss of main functionality Opensource solution Run under Linux

Key dependencies to overcome: Deployment difficulty Migration an existing bulk of users to the new middleware Converting existing Openwis code to the new system

Deliverables

1/ A new identity and access management solution for Openwis (possibly Keycloak https://www.keycloak.org/). 2/ Documentations (installation, user, configuration) 3/ Scripts to migrate actual users/groups database to the new identity servers

Meteo-France and NOAA will lead the project. A certain portion of funding from the middleware upgrade could be apply to this effort.

Milestones & Schedule

Please list the milestones that will be needed to achieve each of the deliverables that are included within the scope of this project.

Project Milestone	Begin Date	End Date
Project start	April 2020
Keycloak evaluation	April 2020	Summer 2020
insert milestone 2
insert milestone n
Project closure	October 2020

Roles and Responsibilities

Please list the people to involve or equipment (such as hardware and/or software) in this project; what their role in the project is; and what they will deliver (relate this to a milestone where relevant)

Organisation	Role	What this resource will be do in relation to a listed milestone
Benjamin Saclier	MF	Technical Team member
Yves Goupil	MF	Technical Team member
Steve Olson	NWS	Technical Team member
Marc Giannoni	NWS	Technical Team member
Zhan Zhang	NWS	Technical Team member

Communication and Reporting

A github ticket and report on the findings of this work can be found at: https://github.com/OpenWIS/openwis-documentation/issues/585

Configuration Management

This was just an investigative study. The findings report can be found in: https://github.com/OpenWIS/openwis-documentation/issues/585