SciTokens profile analysis

[jbasney]

Identify "points of harmonization" for the SciTokens profile following the AARC & WLCG example.

[jbasney]

ver claim: SciTokens uses ver, WLCG uses wlcg.ver

[vokac]

• aud claim special value: SciTokens uses ANY, WLCG use https://wlcg.cern.ch/jwt/v1/any
• jti claim: OPTIONAL for SciTokens, REQUIRED for WLCG tokens
• nbf claim: CRITICAL (what does that mean?) for SciTokens, OPTIONAL for WLCG tokens
• scopes: SciTokens comes with read:/foo and write:/foo, WLCG use storage.read:/foo, storage.create:/foo, storage.modify:/foo and storage.stage:/foo
• scopes: I guess SciTokens scopes queue and execute were never really used

[marcvs]

In case it helps: I've added CILogon to orpheus at https://orpheus.data.kit.edu/authcode/CILogon

[msalle]

Forgot about this relevant talk from @bbockelm : https://indico.cern.ch/event/739896/#10-scitokens-and-iam-interoper