Primary Items for discussion at the PEARC Conference. Please feel free to clarify these items and add more!
Identity and Access Management (IAM)
Although several XSEDE services will be retired and no longer available after August 31, 2022, the primary XSEDE username/password mechanism will remain the same. In ACCESS, we are referring to this simply as one’s ACCESS ID and password, which customers will continue to employ to authenticate to common ACCESS services. Login to user interfaces requiring a higher level of assurance (e.g., access to project allocations and member information) will require additional authentication with DUO.
Web services that currently rely on idp.xsede.org to facilitate authentication should redirect to idp.access-ci.org instead. We expect to have idp.access-ci.org available for testing no later than August 1, 2022.
Customers who currently authenticate using their XSEDE username and password via CILogon will instead select ACCESS from the list of CILogon authentication providers to authenticate in the same manner.
Single Sign On Hub - alternative approaches
Primarily focused on Resource Providers and Partner Institutions. Guidance on how to log into resource provider directly.
For individual SSOHub customers, guidance will need to be provided by each XSEDE Service Provider (ACCESS Resource Provider) about how to use ssh to login directly to the SP's login hosts. All SPs have their own documentation at their websites for this. Some SPs will need to update their current documentation accordingly. [Generate a list of links to documentation for the SPs to which XSEDE customers can login from the SSOHub today]
Strategies for ACCESS RPs to authenticate customer ssh logins with ACCESS IDs are being developed. The main obstacle is mapping or translation of ACCESS IDs to site-local IDs. We are coordinating with XSEDE to publish guidance for ACCESS RPs as soon as possible. [Need contact info for who/where RPs should send questions to on this topic - fallback: send to Derek Simmel <dsimmel@psc.edu>]
AMP Portal
Globus
The Globus subscription provided by XSEDE to allocated Service Providers will be continued through the first year of ACCESS operations (August 2023) by the CONECT team. Throughout the first year, CONECT will be working with key stakeholders to either identify a funding mechanism to sustain the subscription for the duration of the ACCESS award, or to retire the Globus subscription at the end of August 2023 alongside recommending alternatives solutions for the Resource Provider community (which could include using free/unpaid Globus endpoints).
RAMPS Marketplace
All active XSEDE allocations (with an expiration date beyond September 1, 2022) will be “mapped” to the new ACCESS allocations tiers. More information on the new tiers will be broadcast on the Advance to ACCESS page.
ACCESS Allocations will continue to accommodate the variety of projects that have been supported through XSEDE (educational, Campus Champion, Gateway, etc.).
The research communities and Resource Providers can expect an emphasis on time savings and simplification in the allocations process and policies.
The upcoming allocation proposal opportunity will follow the XSEDE timeline:
Opportunity opens on September 15
Closes on October 15
Review meeting will take place in early December
Allocations will start (or be renewed) on January 1
Groups with modest resource requirements can expect a lighter weight allocations process.
Questions, comments, or interest in joining the review panel for ACCESS allocations requests, please use this form to contact Allocations.
Ticketing System
Initial service will be a transition of the XSEDE RT system. This will help provide the seamless transition for the community. As additional requirements and innovative approaches are refined, new ticketing services will become available. The tentative team plan is for this to happen by end of the 2022 calendar year.
Users can expect to continue to submit tickets on September 1.
Production Allocated Compute/Storage/Cloud Integration
The ACCESS program is preparing an “ACCESS Allocated Production Compute/Storage/Cloud” roadmap, listing the tasks that resource providers should complete for each resource to be ACCESS Allocated and in production on September 1, 2022. Many of these tasks will be familiar to existing XSEDE service providers as they are adaptations of XSEDE’s resource integration checklist(s) to the ACCESS program. Resource providers will receive this integration roadmap before the end of July so that they can complete their ACCESS operational integration by September 1st.