Interface to Indigo IAM IdP

[fstagni]

(from discussion happening in https://indico.cern.ch/event/893140/)

While the protocol support will be assured, we need to make sure that the information present in the token will be properly interpreted.

[TaykYoku]

Can you assign me here.

There is still no single token format for all IdPs, so there is a special class in src/DIRAC/Resources/IdProvider/IAMIdProvider.py(#5149) that describes IAM-specific token validation. Common to all algorithms are described in src/DIRAC/Resources/IdProvider/OAuth2IdProvider.py.

We need to read the user ID and its DIRAC group from the token. The user ID is passed to the standard sub claim. The DIRAC user group will be searched according to the token scope.

[aldbr]

Not entirely sure of what you wanted from this issue.
We are able to interact with the Indigo IAM IdP via the OAuth2IdProvider module.
Should we close this issue?

[fstagni]

Yes, the issue can be closed.