Note
This technote is not yet published.
Identity management for LSST is currently tightly coupled to NCSA Kerberos identities. This document proposes several alternatives for separating these, as suggested by the Identity Management Review and recommended by the 2019 Joint Status Review.