What is the XSEDE Single Sign-On Login Hub?
The Extreme Science and Engineering Discovery Environment (XSEDE) Single Sign-On Login Hub (
login.xsede.org) lets you access your accounts on XSEDE digital services using your favorite SSH client and your XSEDE-wide credentials. Once you're logged into the Single Sign-On Login Hub, you can use GSI-OpenSSH from the command line to access your accounts on XSEDE digital services without entering system-specific usernames and passwords.
On this page:
- Logging into the Single Sign-On Login Hub
- Connecting via GSI-OpenSSH to your XSEDE accounts
- Setting up host aliases
- Refreshing your credential
- More information
Logging into the Single Sign-On Login Hub
To log into the XSEDE Single Sign-On Login Hub, SSH to
login.xsede.org using your XSEDE-wide username and password; for example (for XSEDE user
[darvader@deathstar ~]$ ssh firstname.lastname@example.org Warning: Permanently added 'login.xsede.org ...' (RSA) to the list of known hosts. email@example.com's password: Creating directory '/home/darvader'.
Connecting via GSI-OpenSSH to your XSEDE accounts
Once you're logged into the Single Sign-On Login Hub, you can use GSI-OpenSSH (
gsissh on the command line) to connect to any XSEDE digital service on which you have an account. When you do, you will not need to specify your XSEDE username or enter your XSEDE-wide password. (To find the hostnames for your digital services, log into the XSEDE User Portal, and then, on the tab, click .)
Setting up host aliases
To further simplify access to your XSEDE accounts, add host aliases to your
~/.ssh/config file on the Single Sign-On Login Hub. For example, to set up a host alias for Stampede, edit (or create)
~/.ssh/config , adding these lines:
## Host aliases for XSEDE services ## --------------------------------## Host stampede Hostname stampede.tacc.xsede.org Port 2222
After saving, you'll be able to connect to the host using its alias (instead of the full hostname), for example:
[davader@gw69 ~]$ gsissh stampede
Note: If you create an alias for Stampede (TACC), Maverick (TACC), or SuperMIC (LSU), remember to include the port number; that way, the port number becomes part of the alias and is passed automatically when you connect.
Refreshing your credential
Your credential on the Single Sign-On Login Hub will eventually expire (usually after 12 hours), after which you'll no longer be able to GSI-OpenSSH to any of your XSEDE accounts. To refresh the credential, log out of the Single Sign-On Login Hub, and then log in again.
To see how much time (in seconds) is left before your credential expires, on the Single Sign-On Login Hub command line, enter
grid-proxy-info -timeleft; your session should look something like this:
[davader@gw69 ~]$ grid-proxy-info -timeleft 41360 [davader@gw69 ~]$
For information about alternative methods of accessing your XSEDE resources, see Access Resources in the XSEDE User Portal.
If you need help or have questions, contact the XSEDE Help Desk.
For more about XSEDE compute, advanced visualization, storage, and special purpose systems, see the Resources Overview, Systems Monitor, and User Guides. For scheduled maintenance windows, outages, and other announcements related to XSEDE digital services, see User News.