Authentication and Authorization Considerations for a Multi-tenant Service
Randy W. Heiland, Scott Koranda, Suresh Marru, Marlon Pierce, Von Welch · 2015
Distributed cyberinfrastructure requires users (and machines) to perform some sort of authentication and authorization (together simply known as \emph{auth}). In the early days of computing, authentication was performed with just a username and password combination, and this is still prevalent today. But during the past several years, we have seen an evolution of approaches and protocols for auth: Kerberos, SSH keys, X.509, OpenID, API keys, OAuth, and more. Not surprisingly, there are trade-offs, both technical and social, for each approach.