Single Sign-on Quick Start

Home > User Support > SSO Quick Start

Single Sign-on (SSO) refers to the ability to log in from one location, authenticating yourself so that you will be recognized by all TeraGrid resources without having to repeatedly enter your login information for each command or resource. All TeraGrid users can log in via Single Sign-on, which is based on Grid Security Infrastructure (GSI), a part of the Globus Toolkit. Authentication on TeraGrid resources is accomplished through user certificates and recognized certificate authorities (CAs).

Single Sign-on is also known as GSI-SSH authentication. For more information, see Understanding Authentication on the TeraGrid.

The directions below are valid only for users with the current SoftEnv keys. See Resetting your .soft file for more details on SoftEnv setup.

The method you use for SSO depends on your starting point for entering the TeraGrid, and on the CA you use. You can even use non-TeraGrid certificates, but they require a little extra work. Choose from any of the following to begin using SSO on TeraGrid.

• SSO Via the Teragrid User Portal (Recommended)
  • This method uses a GSI-SSH module to connect to any TG resource that you have access to, without having to enter a username or password once you are logged into the Portal
  • Automated: set-up is done for you; you can start computing using your TeraGrid-wide login as soon as you get your information packet
  • Starting point is the portal; go to the "My Teragrid" tab, and then click on the "Accounts" link. From there, you are able to login to a valid resource of your choice without having to enter your password.
     
• Easy SSO from the command line of a TeraGrid resource
  • Requires you to know 2 passwords: the login for the resource where you've chosen to start and your TeraGrid-wide login
  • Automated: set-up is done for you; you can start computing using your TeraGrid-wide login as soon as you get your information packet
  • Starting point is the command line of a TeraGrid resource
  • Instructions for Single Sign-on from the command line
     
• SSO from your desktop/laptop (Beta):
  • Requires you to know only 1 password: your TeraGrid-wide login
  • Starting point is a browser window (Windows) or your local Linux/Unix/MacOSX command line using the tgsso application
  • Set-up process on TeraGrid resources is automated for you
  • Easy gsi-ssh term installation (Unix/Linux/MacOSX) or Java applet (Windows, Beta) on your workstation
    • Instructions for Mac OSX/UNIX/Linux
    • Instructions for Windows (Beta)
  • Uses default certificate issued for TeraGrid by the NCSA CA
     
• SSO using non-default certificates:
  • Allows use of certificate other than default by NCSA CA
  • Requires manual set up by user at each resource where you will be computing
  • Requires you to know how to log in to each resource for initial set-up only
  • Instructions for Single Sign-on for non-TeraGrid CAs and list of accepted CAs

• For links to more information to help you get started on the TeraGrid, see the Getting Started Guide
• Want to know more about how authentication works? See Understanding Authentication on the TeraGrid.
• Need information on managing your account? See the Usage and Refund Policy pages.