The Science Gateway paradigm Manuel Rodríguez-Pascual & Rafael Mayo-García CIEMAT

1. The Science Gateway paradigm Manuel Rodríguez-Pascual & Rafael Mayo-García CIEMAT On behalf of the development team at University of Catania and INFN – Italy (sg-licence@ct.infn.it )

2. Outline • Considerations on the number of users of e-Infrastructures • The Science Gateway paradigm: • Architecture • Authentication and Authorisation • The «Grid Engine» • The Science Gateway • Summary and conclusions

3. A «global» scale >340 sites in 57 countries ~337,000 CPU cores >220 PB of storage ~1 million jobs/day ~20,000 users in ~280 VOs Are 20,000 users a big number ?

4. Some interesting figures

5. The reason is that using Gridsis not straightforward  • Barriers in the adoption of Grids • Changes on Grids means changes on applications • Time required to adapt usual workflows • Lack of structure to support anonymous access • Download and installation of applications • Interface • Slow to get to compared to other resources • Difficult to use in the beginning • Time spent to get the application compiled and running

6. The reason is that using Gridsis not straightforward  Users have to cope with complex security procedures, execution scripts, job description languages, command line based interfaces and lack of standards. This makes the learning curve very steep and keeps non IT-experts away.

7. Another consideration… # of users VRCs There is a huge number of people out there who do not belong to any constituted Virtual Research Community. How can we attract them ?

8. The Science Gateway “A Science Gateway is a community-developed set of tools, applications, and data that is integrated via a portal or a suite of applications, usually in a graphical user interface, that is further customized to meet the needs of a specific community.” Teragrid

9. Building Science Gatewaysshould be like playing with • Standards • Simplicity • Easiness of use • Re-usability Sc. Gtwy E Sc. Gtwy A Sc. Gtwy B Sc. Gtwy C Sc. Gtwy D

10. Our reference model Embedded Applications Administrator Power User Basic User Appl 1 Appl N Appl 2 Science Gateway Grid Services Users from differentorganisationshavingdifferentroles and privileges

11. Liferay(www.liferay.com) • Highly-configurable, scalable, open source portal framework; • Compatible with JSR 168/268 standards and based on modern web 2.0 technologies; • Examples of Liferay services: • Portal; • CMS; • eCollaboration and “social” software.

12. AuthN & AuthZ Schema Science Gateway Authorisation Authentication GrIDP (“catch-all”) 1. Register to a Service Social Networks’ Bridge IdP IDPCT (“catch-all”) IDP_y 2. Sign in ......... LDAP

13. The Grid IDentity Pool (GrIDP)(http://gridp.ct.infn.it) This is a “catch-all” Identity Federation

14. Identity Federations (https://refeds.org)

15. A Generic Grid Engine for SGbased on SAGA/JSAGA LiferayPortlets Science GW 1 Science GW 3 Science GW 2 Grid Engine Science GW Interface eToken Server Users Tracking DB UsersTrack & Monit. Data Engine Job Engine SAGA/JSAGA API Grid MWs DONE DONE DONE By mid April By end of April

16. Data Engine - Requirements • A file browser shows Grid files in a tree • File system exposed by the Science Gateway is virtual • Easy transfers from/to Grid (through the SG at the moment) are done in a few clicks • Users do not need to care about how and where their files are really located

17. SG developed at Catania

18. The registration procedure

19. The authentication procedure «catch-all» Identity Provider Identity Federations’ discovery service

20. The GISELA SG (1/6)(http://gisela-gw.ct.infn.it)

21. The GISELA SG (2/6)(http://gisela-gw.ct.infn.it)

22. The GISELA SG (3/6)(http://gisela-gw.ct.infn.it)

23. The GISELA SG (4/6)(http://gisela-gw.ct.infn.it)

24. The GISELA SG (5/6)(http://gisela-gw.ct.infn.it)

25. The GISELA SG (6/6)(http://gisela-gw.ct.infn.it) • Current Bioinformatics applications integrated in the GISELA Science Gateway • ClustalW • GATE • Phylogenetics (MrBayes) • Bioinformatics applications which are being integrated in the Science Gateway • jModelTest • ProtTest3 • Biomed project which make use of SG • DECIDE

26. The CHAIN Application DB • Project-specific Science Gateways can be accessed from the CHAIN Applications Data Base • www.chain-project.eu/applications

27. Summary and conclusions • Science Gateways and Identity Federations can revolutionize the way Grid infrastructure are used, hugely widening the potential user base • The adopion of standards (JSR 286, SAGA, SAML, etc.) represents a concrete investment towards sustainability • Now that millions of users can potentially access and use the GISELA Science Gateway, we are working on integrating a portfolio of «appealing» applications to attract them • If you want to integrate your applications in the Science Gateways, or simply enable your websites with the used authentication tools, please contact sg-licence@ct.infn.it

28. Credits & Acknowledgments Acknowledgments Credits • Enrico Fasanelli (INFN); • Maria Laura Mantovani (GARR); • Barbara Monticini (GARR); • SimonaVenuti (GARR) Valeria Ardizzone (COMETA); Roberto Barbera (U. Catania) Riccardo Bruno (COMETA); Antonio Calanducci (COMETA); Marco Fargetta (COMETA) Elisa Ingrà (GARR); Giuseppe La Rocca (INFN) Salvatore Monforte (INFN); Fabrizio Pistagna (INFN); Rita Ricceri (INFN); Riccardo Rotondo (INFN) Diego Scardaci (INFN)