EINFRA AAI

EINFRA AAI is a service which provides authentication and authorisation for services within EINFRA.

From the user's point of view, he/she is provided with a single entry point for using the connected services. AAI relies on the usage of user accounts managed by third parties (universities, organizations or social networks). This creates a more user-friendly way of how the users can authenticate to the services. They just simply create an AAI account and connect it to an external account. Not only users can have one account connected, but they can also add even more so-called identities. As a result, no matter which external account from the ones associated with their EINFRA account use, they still get recognized as the same person at the end service. Another benefit of having AAI account is the lack of need to register into each service separately.

The AAI also helps providers of the services. Instead of implementing their own user management frameworks, they can delegate this functionality to the AAI and concentrate on the main goal of providing the service. EINFRA AAI offers centralised management of users and the possibility to organize users in different units. This also allows setting up different access control rights, i.e. based on membership in a specific organizational unit.