Custos provides different layers of user filtering for authentication and authorization.
User filtering for authentication
- Institutional filtering
Custos provides the flexibility of configuring OIDC-based Identity federation services. By default, CILogon is integrated with Custos and supports all institutions provided by the Incommon federation.
Any users from those institutions should be able to authenticate. In addition, the Custos provides Institutional Whitelisting API where clients can store a selected set of institutions with relevant metadata such as entitId to filter out the institutional loading only for those selected Institutions.