Executive Summary: A campus IT administrator or service provider needs to obtain affiliated institutions when individuals login to a service so the service provider can track usage by consortium or other groupings of institutions.
XSEDE's Web SSO service (Globus Auth) satisfies this use case fully and the documentation specifically addresses how to do this. No further work is planned at this time.
Component | User facing? | Component’s role in the capability |
---|---|---|
Globus Auth | yes | Globus Auth is XSEDE's Web Single Sign-On (SSO) service. Applications that use Globus Auth for logins can access the user's organization affiliation data. The affiliation data comes from the user's XSEDE user profile and from any non-XSEDE identities (e.g., campus ID) that the user has linked to his/her XSEDE identity. |
Globus Auth ID Explorer | yes | The XSEDE Globus Identity Explorer web application provides a helpful view of the identity data returned by Globus Auth. Application developers can use this application to see what the identity data returned by Globus Auth looks like. |