Single Sign-on Instructions

New User Sign-up

New users can access ESI OpenStack dashboard login page and choose the OpenID Connect authentication method. Then you will be redirected to a page to select a login provider. After choosing a login method, follow the steps provided.

Note that during the first login, you will receive an error message like this: Login failed: You are not authorized for any projects or domains. If this occurs, please contact ESI admin to add your user account to a proper project and assign roles to your account.

After your account has been properly configured, you can follow the same steps to log in and successfully authenticate, getting access to the ESI Horizon dashboard. Please read the New User Guide section for more information on starting to use ESI.

Use the CLI to Authenticate

Once new users have signed up using Horizon WebSSO, they can use the CLI tool to access ESI OpenStack APIs.

Prerequisites

The python-openstackclient is required to authenticate users.

Create an Application Credential

  1. Log in to ESI dashboard using your account credentials.

  2. Select the project for which you want to create an application credential from the dropdown menu.

  3. In the sidebar, navigate to Identity > Application Credentials.

  4. Click the Create Application Credential button.

  5. Provide a name for your credential and select all available roles. All other fields are optional.

  6. After creation, you will be prompted to download an RC file or a clouds.yaml file. Download the file and use it to run OpenStack command-line clients. You can find more information about OpenStack Client usage here.