XSEDE Capability Delivery Plan for "IDM-04: Login to XSEDE user portal with a non-XSEDE identity"
URLs: Public, Review
Executive Summary: An XSEDE user needs to login to the XSEDE user portal (XUP) using a non-XSEDE identity.
First CDP: 2017-11-22
- Ability to specify trusted identity providers
|Component||User facing?||Component’s role in the capability|
|Globus Auth||yes||XSEDE’s public authentication interface, based on OpenID Connect (OIDC). Globus Auth provides the authentication interface that allows direct XSEDE authentication via 2-legged OAuth2 and indirect authentication via 3-legged OAuth2 and OIDC.|
|Kerberos||no||XSEDE’s Kerberos service, which stores all XSEDE usernames and passwords and provides simple username/password authentication.|
|XSEDE User Portal (XUP)||yes||The front-end (web browser-based) user interface to the XSEDE system where individuals register with XSEDE, manage their user profile information, request allocations to use XSEDE SP resources, and manage membership in projects that have active allocations.|