Evolving INDIGO IAM towards the next challenges
Federica Agostini, Luca Bassi, Donald Chung, Ivan De Simone, Manoj Garai, Jacopo Gasparetto, Francesco Maria Giacomini, Davide Marcato, Roberta Miccoli, Saiteja Reddy Vennapusa, Enrico Vianello, Stefano Enrico Zotti · EPJ Web of Conferences · 2025
INDIGO IAM (Identity and Access Management) is a comprehensive service that enables organizations to manage and control access to their resources and systems efficiently, by implementing a standard OAuth Authorization Service and OpenID Connect Provider. It has been chosen as the AAI solution by the WLCG community for the transition from VOMS proxy-based authorization to JSON web tokens. This contribution describes the recent updates introduced by the latest IAM releases and the current roadmap for its evolution. In the near future, a primary focus is on avoiding to store access tokens in the database, to enhance the performance of both token issuance and token deletion. Another important milestone is the integration of a Multi-Factor Authentication mechanism. Additionally, substantial effort will be dedicated to migrating from outdated frameworks, such as MITREid Connect and AngularJS, to more stable and robust solutions based on Spring Security and React, respectively. As a consequence, a new dashboard is also being developed, aligned with the latest advances in the User Interface design. This contribution highlights the progress made in the development roadmap described above, not forgetting the general auditing and performance improvements introduced with the latest releases or planned, such as the use of Open Policy Agent to re-implement the internal mechanism of the Scope Policy API.