Managing Virtual Organisations in Keystone

In federated Keystone, neither administrators nor users are typically aware of their identities as issued by the Identity Providers. We propose that a management utility should be available for administrators to organise the membership of VOs, by inviting VO members to self-register. In this way, neither the administrator nor the VO member need be aware of either the identifier or identity attributes issued to him/her by their IdP.