Overview of access procedure
The Open Science Grid governs access to grid resources through an accounting framework that assigns each user's jobs to an accounting group or project. As a new user of the OSG, therefore, one of the first things to iron out is what project or projects best describe your work. This is more a matter of accountability than of entitlement: it concerns how organizations report to their sponsors and funding agencies on the utilization of resources placed under their administration.
To assist in this, OSG Connect uses a group management tool that places users — individual human identities — into one or more groups with names such as osg.RDCEP or osg.Extenci. The osg portion of this name differentiates our groups from those of other organizations in the same group management facility. The latter portion identifies the specific project, each with a Principal Investigator or other administrator, that oversees access to resources. Within our web tools, these names are often in mixed case, though you may see them uppercased in some reporting/accounting software.
The first step in registration is to create a user account and bind it to other identity information. After that you will enroll in a project group.
Sign in to or create an account
Before enrolling in a project you must have an account in the identity management framework. Visit the OSG Connect web site, then select Sign In/Sign Up ▸ Sign up as a new user. There are a few paths forward from here, but all end up with linking your OSG Connect identity with a Globus Online identity. This not only provides integrated identity service, it also enables you to begin performing data transfers to OSG Connect very early on, with a minimal fuss, using Globus Online transfer.
The default first step is to sign in using an InCommon ID through the CILogon service. This allows you to enroll using your existing campus identifier and credentials, provided that your home institution is a member of the InCommon Federation.
Click on Proceed to begin this process. You'll be directed to a discovery service which asks you what your home institution is. (If you've used CILogon before it may already know your home institution and skip this step.) Locate your institution in the list, or type its name to find matches. If your institution does not appear, it may not be an InCommon member; you'll need to register using another approach described below.
After selecting your institution in the discovery service, you'll be taken to your own institution's local sign-in screen. You've probably used it before, and if it looks familiar that's because it's exactly the same web site. Sign in using your campus credentials. When done, you'll return automatically to the OSG Connect portal and can carry on with signup.
If your institution is not linked to CILogon, you can sign in with a Globus (Online) identity instead. Click on Sign Up with Globus. If you already have a Globus account, click Already a member? Sign In to sign in now. Otherwise, provide your name, email address, and a username and password to register a new account. Your OSG Connect identity will piggyback from here.
Using Globus Online ID (existing)
|Using Globus Online (new)|
Click Sign Up with Globus,
then Already a member? Sign In
Click Sign Up with Globus.
Select your institution from the CILogon site.
Enter Globus username and password.
|Enter Name, Email, Username, Password.|
Perform authentication at your institution.
|Await validation email, use link to confirm.|
Go to the Link accounts workflow.
Go to the Join group workflow.
After CILogon signin, you should find yourself at a
portal.osgconnect.net screen that deals with Globus Online ID. If you don't have a Globus Online account already, skip this section. Click on Create a new Globus Online account and move on to the next section.
If you have a Globus Online account, go ahead and sign in. This will link your account information together, allowing you to sign in using your InCommon ID or any other ID that you link in the future. Otherwise, create one now.
Create a new Globus Online account
You'll see some activity in the browser as you automatically join the osg community, and you may need to provide some additional personal information: a Field of Science, a Department, an Institution, and a Phone Number. Finally you'll land on the Manage Identities screen. Move on to Add an SSH key.
Add an SSH key
- If you already have an SSH key you're happy using, upload the public key now.
- If you want or need to create a new SSH key and you're comfortable with an SSH key generation tool, you can generate a new key for OSG Connect and upload its public key.
- If you're not familiar with SSH key generation, you can use our key generation tool. This will create a key pair — a public key and a matching private key — and allow you to copy or download them.
No matter which of these options you use, you should click Add SSH Public Key, then paste in your public key and submit.
Join a project
Congratulations! You're now signed up, and you have all the accounts that you'll need. A critical step remains, though, before you can begin computing. You've now joined the OSG Connect community, which gives you visibility of the various projects associated with OSG Connect. To begin working in the facility, or using the Stash service for file storage, you'll need to join one (or more) of them.
You may already know what project(s) you need to join, go to the OSG Connect web site and select the Connect ▸ Join a Project menu item to see a list of currently active projects. (If you're a PI, and your project is not shown, let us know. Details on setting up a new project in OSG Connect are shown elsewhere in the ConnnectBook.)
Once you've found a project to join, simply click on its name at the left of your screen, and then on Join Now at the lower right. On receiving your request, SG Connect staff will request authorization from the PI or designated representative. Upon acceptance, you will automatically be granted all access to submit node and to Stash. On the submit node, you'll be a member of a UNIX group representing the project. And, in addition to your personal stash, the project will have its own group stash for shared data.
For our workshops, we readily admit attendees into the
osg.ConnectTrain project. Even if you have no other project at this time, we can bring you in for the short term to learn more about OSG Connect. After the workshop, please feel free and ready to discuss creation of projects to more closely accommodate your work.
Having stepped through these procedures and joined an
osg.* project group, you have all the roles and access that you need to continue working. There can be some delay for project membership approval, but aside from that access rights are generally implemented in the OSG Connect servers within minutes. Take a moment if you need to, then we'll move on to basic high-throughput (HT) job submission using HTCondor.