New InCommon Identity Provider for XSEDE Identities
XSEDE's InCommon Identity Provider (IdP) idp.xsede.org allows XSEDE users to sign in to web sites that are part of the InCommon Federation (for example, GENI and ORCID) using their XSEDE accounts. This capability is especially useful for users who do not have an existing InCommon IdP provided by their home institution.
When signing in to a service that supports InCommon IdPs, first try using your home institution's IdP. If that option isn't available, choose XSEDE from the list of IdPs to sign in with your XSEDE account. Your web browser will be redirected to idp.xsede.org to complete the sign-in operation. The XSEDE IdP will prompt for Duo authentication if you have enabled it via the XUP according to https://portal.xsede.org/mfa and you have not logged in to idp.xsede.org recently. As always, you should only enter your XSEDE password on xsede.org sites.
The XSEDE IdP implements optional single sign-on (SSO), meaning that if you have already authenticated at idp.xsede.org recently, you will not be prompted again for your password. To disable SSO for idp.xsede.org, check the "Don't Remember Login" checkbox so that you will be prompted to sign in next time. If you did not check the "Don't Remember Login" checkbox and would like to be prompted to sign in to idp.xsede.org, you can do so by clearing your browser cookies for idp.xsede.org.
XSEDE's InCommon IdP conforms to the standards set by the REFEDS Research and Scholarship and REFEDS Security Incident Response Trust Framework for Federated Identity for global interoperability.
More information is available at https://www.xsede.org/security/incommon.