Non‐Federated Registration Process - LSSTDESC/slac-authentication-transition GitHub Wiki

Introduction

If you do not have credentials at a SLAC-recognized Federated institution, then you will need to apply for a SLAC Computing account. This process is started when

  • you complete Step 3 in the SLAC IT email invitation with the Subject: "Action needed to continue accessing SLAC resources" which was sent in October 2024 to those DESC members who had an external SLAC Crowd account.

OR

  • you complete Step 3 in the SLAC IT email with Subject "Collaborator Invitation to SLAC Resources" which is sent to you when you first join the DESC.

Note

It is understood that the "Non-Federated Registration" process is a big change especially to those who are not U.S. citizens. There are plans to offer an alternative called an "Identity Provider of Last Resort" which should be a much lighter weight process. It is unfortunately unknown how long it will take to make that option available and the registration process described below is currently the only path forward.

Outline of the steps involved to apply for a SLAC Computing Account

  • Step 3 in the original SLAC Invitation email provides a link where you initiate the process of applying for SLAC Computing account. Clicking the link in the email and following the instructions results in a "petition" being created in the SLAC Identity Portal.
  • Once that petition is approved, an email with the Subject: "Initial request to join the SLAC Identity Portal has been approved" will be sent to you.
  • The email will include a link to start the SLAC Site Access Portal Form, clicking on that link will lead you to this screen, choose "Affiliate, Scientific User, Unpaid Intern" and click "Next"
  • The next screen will require filling in your contact details including your country of birth and citizenship.
  • For SLAC Point of Contact, please input "Heather Kelly".
  • In the “Please provide the details of your visit” text box, please enter something like “I am a member of LSST DESC from [Name of institution] and need a SLAC computing account to access DESC resources hosted at SLAC.”
  • If you choose "Yes" for "Are you a U.S. Citizen?", you will be presented with one final question, answer Yes or No then click Continue
  • If you choose "No" for "Are you a U.S. Citizen?", additional questions will appear. Please submit an CV with the following guidelines:
    • The CV must be written in English
    • All education and work history back to the start of college (within the last 10 years)
    • Beginning and end dates of education and experience must include month and year (mm/yyyy format)
    • Include all science and technology specialties
    • Names of all academic institutions attended must be current/accurate
    • There should be no time gap. If any gaps in education and/or employment, it must be noted and explained
    • Do not include social security numbers, government ID numbers, passport numbers, or any other similar data
  • The next page will ask if you have any association with certain countries:
  • Additional questions will appear depending on how you respond to the current questions. When you have answered all the questions, a "Submit" button will appear:

After You Submit your Site Access Form

  • Keep alert for any emails from SLAC Human Resources in case they reach out with questions about your application.
    • You could whitelist the domain slac.stanford.edu in your email client to help prevent these messages going to your Spam folder
    • Message will likely come from: [email protected] with a subject line like: "More information is requested."

Once you have your SLAC Windows account

  • SLAC will send you an email with the subject: "Cyber Training Coming Due" requesting that you complete the required annual SLAC CyberSecurity Training within a week.

  • Return to the email from SLAC IT with the Subject: "Action needed to continue accessing SLAC resources" and complete Step 4. This step is reassigning your old SLAC Crowd account to your new SLAC Windows account. After this is completed, you can log into SLAC Confluence using your SLAC Windows credentials.

    • This step requires that you know your external SLAC Crowd account username and password.

    • Once you have completed Step 4, you will use your SLAC credentials to log into SLAC Confluence to access the DESC Confluence space from now on. Instructions for logging in with your SLAC credentials are available here..

  • You will need to complete the annual SLAC Cybersecurity training within a week after your SLAC Windows account is enabled. SLAC IT will send you an email with instructions with the subject "Cyber Training Coming Due". If you do not complete the required training, your Windows account will be disabled. You can still complete the training and SLAC IT will automatically re-enable your access within 1 hour of successful completion of the training. Alternately, you may contact the IT Help Desk during normal business hours to have your account re-enabled if you have proof of completion (see contact details below).

  • To maintain your SLAC Windows account, you need to log into SLAC resources at least once every 60 days. You can do this by logging into SLAC confluence (confluence.slac.stanford.edu) using your SLAC credentials. SLAC will send you an email reminder using the email they have on record with the subject line: "ACTION REQUIRED: Log in to your SLAC account". The email SLAC uses does not necessarily match what you have stored in the DESC member database.