What is the XSEDE Single Sign-On Login Hub?

The Extreme Science and Engineering Discovery Environment (XSEDE) Single Sign-On Login Hub (login.xsede.org) lets you access your accounts on XSEDE digital services using your favorite SSH client and your XSEDE-wide credentials. Once you're logged into the Single Sign-On Login Hub, you can use GSI-OpenSSH from the command line to access your accounts on XSEDE digital services without entering system-specific usernames and passwords.

Note:
Per XSEDE security policy, you cannot use the XSEDE Single Sign-On Login Hub to log into a community account, or any non-individual group account. For information about alternative methods of accessing your XSEDE resources, see Access Resources in the XSEDE User Portal.

On this page:


Logging into the Single Sign-On Login Hub

To log into the XSEDE Single Sign-On Login Hub, SSH to login.xsede.org using your XSEDE-wide username and password; for example (for XSEDE user davader):

  [darvader@deathstar ~]$ ssh darvader@login.xsede.org
  Warning: Permanently added 'login.xsede.org ...' (RSA) to the list of known hosts.
  darvader@login.xsede.org's password:
  Creating directory '/home/darvader'.
Note:
Per XSEDE security policy, you cannot use the XSEDE Single Sign-On Login Hub to log into a community account, or any non-individual group account. For information about alternative methods of accessing your XSEDE resources, see Access Resources in the XSEDE User Portal.

Connecting via GSI-OpenSSH to your XSEDE accounts

Once you're logged into the Single Sign-On Login Hub, you can use GSI-OpenSSH (gsissh on the command line) to connect to any XSEDE digital service on which you have an account. When you do, you will not need to specify your XSEDE username or enter your XSEDE-wide password. (To find the hostnames for your digital services, log into the XSEDE User Portal, and then, on the My XSEDE tab, click Accounts.)

Setting up host aliases

To further simplify access to your XSEDE accounts, add host aliases to your ~/.ssh/config file on the Single Sign-On Login Hub. For example, to set up a host alias for Stampede, edit (or create) ~/.ssh/config , adding these lines:

  ## Host aliases for XSEDE services
  ## --------------------------------##
  
  Host stampede
  Hostname stampede.tacc.xsede.org
  Port 2222

After saving, you'll be able to connect to the host using its alias (instead of the full hostname), for example:

  [davader@gw69 ~]$ gsissh stampede

Note: If you create an alias for Stampede (TACC), Maverick (TACC), or SuperMIC (LSU), remember to include the port number; that way, the port number becomes part of the alias and is passed automatically when you connect.

Refreshing your credential

Your credential on the Single Sign-On Login Hub will eventually expire (usually after 12 hours), after which you'll no longer be able to GSI-OpenSSH to any of your XSEDE accounts. To refresh the credential, log out of the Single Sign-On Login Hub, and then log in again.

To see how much time (in seconds) is left before your credential expires, on the Single Sign-On Login Hub command line, enter grid-proxy-info -timeleft; your session should look something like this:

  [davader@gw69 ~]$ grid-proxy-info -timeleft
  41360
  [davader@gw69 ~]$

More information

For more, see Single Sign-On Login Hub in the XSEDE User Portal.

For information about alternative methods of accessing your XSEDE resources, see Access Resources in the XSEDE User Portal.

If you need help or have questions, contact the XSEDE Help Desk.

For more about XSEDE compute, advanced visualization, storage, and special purpose systems, see the Resources Overview, Systems Monitor, and User Guides. For scheduled maintenance windows, outages, and other announcements related to XSEDE digital services, see User News.

This document was developed with support from National Science Foundation (NSF) grants 1053575 and 1548562. Any opinions, findings, conclusions, or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the NSF.

This is document bdje in the Knowledge Base.
Last modified on 2017-07-18 17:07:57.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.