Single sign-on for java web start applications using myproxy

Authors:
Terry Fleury;Jim Basney;Von Welch
Affiliations:
National Center for Supercomputing Applications, Urbana, IL;National Center for Supercomputing Applications, Urbana, IL;National Center for Supercomputing Applications, Urbana, IL
Venue:
Proceedings of the 3rd ACM workshop on Secure web services
Year:
2006

Citing 4
Cited 1

Java Deployment: with JNLP and WebStart

Java Deployment: with JNLP and WebStart
An Online Credential Repository for the Grid: MyProxy

HPDC '01 Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing
The MyProxy online credential repository: Research Articles

Software—Practice & Experience - Grid Security
Bootstrapping to a semantic grid

CCGRID '05 Proceedings of the Fifth IEEE International Symposium on Cluster Computing and the Grid - Volume 01

HTC scientific computing in a distributed cloud environment

Proceedings of the 4th ACM workshop on Scientific cloud computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Single sign-on is critical for the usability of distributed systems. While there are several authentication mechanisms which support single sign-on (e.g. Kerberos and X.509), it may be difficult to modify a particular legacy application to utilize an authentication scheme other than username/password. Asimple solution for single sign-on involves transmitting a user's password over the network. However, it is undesirable to expose a user's private password in an insecure environment. This paper describes our effort to create "session passwords" which are short-lived passwords transmitted in lieu of a user's private password. Our implementation utilizes the MyProxy X.509 credential service as an authentication service. We demonstrate our solution in the MAEviz application portal, a Java Web Start application for earthquake risk management and analysis.