Login without sharing password

[olisand]

As a Training coordinator, I want to login without having to share a password, so that I don’t need to share passwords with my fellow TrCs.

• There is no requirement on having a personal account. The account can be shared, i.e. one per Node, just as long as it does not require password sharing.
• This could integrate with ELIXIR AAI for authentication, and the ELIXIR website for authorization.

[olisand]

From Fotis:
That is a ... peculiar feature. So far, only TrCs have an "add/edit" account to TMD, so I'm not sure what an "personal account" might be. Maybe expand the account type to include "community representatives", with the TrP being one of these?

[olisand]

From Mihail:
Sure, it's only TrCs, but instead of having one account per TrC, it's one account per Node, shared between TrCs.

[olisand]

From Renato:
We have converged on using ELIXIR AAI for authentication but have accounts in Tango at the node level. That is, if you are a training coordinator and part of a node, you will be identified as that node in Tango. Multiple coordinators of the same node will "share" the same identity/account but use their own credentials to authenticate.

[mihai-sysbio]

Authentication is to be handled by LS AAI. Information about Node membership and role is not immediately available but will be possible in the near future directly from the ELIXIR website. As a workaround to allow progress in the current hackathon, we will hardcode a list of user-ids/emails and node/roles, to be replaced by the above AAI integration once available.