Delegating a credential with a Identity Delegation Policy enables the delegator to provide a list of identities or delegatees that may have access to their credential.  The GAARDS UI provides a mechanism for delegating credentials, to delegate a credential with the GAARDS UI complete the following steps:

1. Launch the GAARDS UI.
2. Login using your user account.
3. From the MyAccount menu select Delegate Credential, this will launch the Delegate Credential Step 1 of 2 window.
4. From the Delegation Service drop down select the Credential Delegation Service to delegate you credential to.
5. From the Credential drop down select the credential to delegate.
6. From the Delegation Lifetime drop downs specify how long the CDS may delegate your credential for.
7. From the Delegation Path Length drop select 1.
8. From the Issued Credential Lifetime drop downs specify how long the credentials issued to third parties by the CDS should be valid for.
9. From the Issued Credential Length drop select 0.
10. From the Delegation Policy drop down select Identity Delegation Policy.
11. Click the Delegate button, this will launch the Delegate Credential Step 2 of 2 window which will allow you to specify your delegation policy.
12. To give a party the ability to obtain a delegate credential enter the Grid Identity of the party in the Grid Identity text field and click the Add button. Repeat this step for each party you wish to delegate your credential to. All parties in which you have granted the ability to obtain your credential will be listed in the table above the Grid Identity text field.
13. Click the Delegate button to delegate your credential.

Delegated a credential with a Group Delegation Policy enables the delegator to specify a Grid Grouper group such that the members of the group may have access to their credential. The GAARDS UI provides a mechanism for delegating credentials, to delegate a credential with the GAARDS UI complete the following steps:

1. Launch the GAARDS UI.
2. Login using your user account.
3. From the MyAccount menu select Delegate Credential, this will launch the Delegate Credential Step 1 of 2 window.
4. From the Delegation Service drop down select the Credential Delegation Service to delegate you credential to.
5. From the Credential drop down select the credential to delegate.
6. From the Delegation Lifetime drop downs specify how long the CDS may delegate your credential for.
7. From the Delegation Path Length drop select 1.
8. From the Issued Credential Lifetime drop downs specify how long the credentials issued to third parties by the CDS should be valid for.
9. From the Issued Credential Length drop select 0.
10. From the Delegation Policy drop down select Group Delegation Policy.
11. Click the Delegate button, this will launch the Delegate Credential Step 2 of 2 window which will allow you to specify your delegation policy.
12. To give members of a Grid Grouper group the ability to access you delegated credential you must specify the URL of the Grid Grouper in the Grid Grouper URL text field and the system name of the group in the Group Name text field. You may also click the Browse Groups button which will bring up a browser that will allow you to browse to the group you want and will fill in the two fields for you.
13. Click the Delegate Credential button to delegate your credential.

The Credential Delegation Service (CDS) allows a user/service (delegator) to delegate their credential to other user/services (delegatee). The GAARDS UI provides a mechanism for delegatees to get a credential delegated to them by a delegator. To obtain a delegated credential please complete the following steps:

1. Launch the GAARDS UI.
2. Login using your user account.
3. From the MyAccount menu select Get Delegated Credential, this will launch the Get Delegated Credential window. At this point UI will go out and discover all the credentials that have been delegated to you by other parties.
4. From the table select the credential you wish to obtain and click the Obtain Credential, this will obtain the delegated credential and launch the proxy manager window with the delegated credential. The Proxy Manager window allows the management of grid proxies or grid credentials. button. This will obtain the requested credential and launch the
5. Click the Set Default button, you are now logged in as the party that delegated you their credential.

The GAARDS UI provides administrators a mechanism for monitoring and managing credentials that have been delegated through the CDS.   Administrators can search for delegated credentials using the following search criteria:

To search for delegated credentials using the GAARDS UI, please complete the following steps:

1. Launch the GAARDS UI.
2. Login as a CDS administrator.
3. From the top menu bar select Account Management, then select Delegation Management, then select Manage Delegated Credentials. This will bring up a window for managing delegated credentials.
4. From the Delegation Service drop down select the Credential Delegation Service you wish to manage your credentials on.
5. From the Credential drop down select your Grid credential.
6. Specify your desired search criteria.
7. Click the Search button.

When the search has completed the delegated credentials meeting the specified search criteria will be listed in the table below the search button.

The General Information tab contains attributes identifying the delegated credential.   These attributes are listed in the table below:

The CDS allows administrators to suspend and re-instate access to delegated credentials. To update the status of a delegated credential, modify the status and click the Update Status button.

Delegation Policy

The Delegation Policy tab specifies which delegation policy was chosen and the details of that delegation policy.  The delegation policy cannot be updated once the credential has been delegated.  Viewing the delegation policy provides insight to administrators  on who can access the delegated credential.

Certificate Chain

The Certificate Chain tab contains the certificate chain of the delegated credential.  You can view an individual certificate in the chain by select the certificate and clicking the View Certificate button.

Auditing

For security purposes and to give administrators insight on a delegated credential, the CDS maintains a list of auditing information for each delegated credential.   The following is a list of auditing information maintained for each delegated credential:

The GAARDS UI allows CDS administrators to search the auditing information for a delegated credential based the following search criteria:

Using the GAARDS UI, administrators can search the auditing information by completing the following steps:

1. Select the Audit tab.
2. Enter the desired search criteria, please consult the table above.  If no search criteria is specified all audit records for the user will be returned.
3. Click the "Search" button.

When the search has completed, the audit records meeting your search criteria will be displayed in the table below the Search button.  To view the complete details of a specific audit record, select that record in the table and click the View button.  This will launch a window containing the complete details of the audit record you selected.