XSEDE Capability Delivery Plan for "SGW-01: Science Gateway user authentication and identity management"

Primary tabs

Use Case SGW-01: Science Gateway user authentication and identity management

Area: Community Building
URLs: Public

Executive Summary: A trusted application (e.g., an approved science gateway) authenticates users using a mechanism of its choice and generates or acquires credentials as needed to perform needed tasks (e.g., job execution, file transfer) on and with XSEDE resources.

URLs: Public
First CDP: 2016-11-22
Current CDP: 2018-08-25
Current Implementation Status: 
PARTIAL
Issues Remaining: 
Time & Effort Summary: 

No effort or changes are proposed at this time.

Significant Revisions:
This capability is currently supported by the following 2 components:
Component User facing? Component’s role in the capability
Globus Auth yes Globus Auth is the Web Single-sign-on service for XSEDE. Globus Auth provides an OpenID Connect (OIDC) interface that allows users to authenticate using any OIDC identity provider, significantly including the CILogon OIDC service, which provides OIDC mapping for many of the thousands of InCommon and EduGAIN SAML/Shibboleth identity providers.
XSEDE User Portal (XUP) yes The XSEDE User Portal (XUP) provides the ability for science gateway users to register with XSEDE. A Science Gateway developer can require gateway users to register with XSEDE before being granted access to the gateway, in which case the gateway will have access to the user's XSEDE user profile information, even if the user logs in using a non-XSEDE identity provider on subsequent visits.

National Science Foundation (NSF)

© XSEDE All Rights Reserved. Visit the Feedback page for assistance or to provide feedback.
The Extreme Science and Engineering Discovery Environment is supported by the National Science Foundation.
Administrative Login