This document is OBSOLETE, please check OIMRegistrationInstructions

OIM Standard Operating Procedures

About This Document

hand This document is for system administrators and grid users. It explains how to use the OSG Information Management System to register users, resources, virtual organizations and vital contacts with the Grid Operations Center (GOC).

Requirements

  1. All procedures require a personal PKI/X509 security certificate that has been issued for you to use for personal identification by one of the Certificate Authorities (CAs) trusted by the Open Science Grid. There is information about which CAs we accept on this page and how to get a new certificate on this page.
  2. You must additionally have some way of managing your certificate, such as a browser that will import it directly, a mac keychain and keychain-compatible browser, or some other kind of certificate manager and its appropriate browser.

How to register a Person with the OIM?

Step in Process Explanation
1. Entering the OIM Portal The user approaches the OIM portal with their web browser.
2. Is there an OSG CA issued Cert in the browser? If a certificate is present, OIM will examine the certificate and compare it to the current registration data. If not, the user will be prompted to return to the site with an OSG CA issued certificate loaded in the browser.
3. Is DN already in OIM? If the user’s Distinguished Name (DN) that appears on his or her certificate is already entered in OIM, then the user has already been approved by the GOC. An approved member may change registration information for any entities for which he or she is listed as an associated contact (administrative, security, miscellaneous, etc). If not, the user is prompted to enter personal information.
4. User inputs Personal Info? The user is required to enter information for GOC approval of her or his OIM membership. Detailed explanation of the requirements of this form can be found here. After the information has been completed, the account is active.

Flowchart

A flowchart of the personal registration process is available here

How to register a Resource with the OIM?

The process begins at the OIM portal. OIM uses the OSG CA issued certificate in a browser or keychain to establish the identity of the user. OIM then compares the information in the certificate against the registered users database to determine whether the visitor is a registered user or not.

Step in Process Explanation
1. Is the user registered? If the user is registered, she or he will be able to authenticate and proceed into the registered user area of OIM. If not, the user will be prompted to complete the personal registration process.
2. Is the resource located at a registered facility? If the facility is registered, the user may select or register a site. If not, the user must first register a facility by going to the "Facilities" section of OIM, choosing to "Add a New Facility" and entering a name and description for their institution.
3. Does the resource use a registered, active site? If the site is ready, the user may select or register a resource group. If it is not registered, the user must first register a new site by going to the "Sites" section of OIM, choosing to "Add a New Administrative Site" and entering a facility, short name, site description, support center and street address for their site (choose CSC for support center if no support center currently exists). If it the site is registered but deactivated, the user must contact goc@opensciencegrid.org to request to have a deactivated site reactivated, as applicable
4. Does the resource use a registered, active resource group? If the resource group is ready, the user may register a new resource. If it it not registered, the user must first register a new resource group by going to the "Resource Groups" section of OIM, choosing to "Add a New Resource Group" and entering a name for the resource group, selecting a site, choosing production or ITB status, and adding a description. If the resource group is registered, but deactivated. The user must contact goc@opensciencegrid.org to request to have a deactivated site reactivated, as applicable
5. Enter Resource information After clicking the "Resources" heading and choosing to add a new resource, the user will be prompted to enter resource information. See the detailed information here for help with the fields here. A ticket is created and the GOC must review this information.
6. GOC Review and Confirm Relationship to OSG The GOC will respond to any incomplete or inaccurate resource registrations with a request to update the registration information. The GOC will filter out any inappropriate or spam registrations, accept complete and accurate registration information and the resource will be activated and included in the next Operations meeting agenda. At this time the Operational Contacts are subscribed to the osg-general, osg-sites, and osg-ops-status mailing lists.
7. Representation at Ops meeting? Generally, the registration ticket will remain open until a representative attends the weekly Operations meeting to answer any questions and give a brief introduction of the resource. The submitter is notified of status. However, this requirement is sometimes deemed unnecessary when the resource provider is familiar with OSG practices and operations and has already announced the resource to his or her user community.

Flowchart

A flowchart of the resource registration process is available here

How to register a Virtual Organization with the OIM?

The process begins at the OIM portal. OIM uses the OSG CA issued certificate in a browser or keychain to establish the identity of the user. OIM then compares the information in the certificate against the registered users database to determine whether the visitor is a registered user or not.

Step in Process Explanation
1. Is the user registered? If the user is registered, she or he will be able to authenticate and proceed into the registered user area of OIM. If not, the user will be prompted to complete the personal registration process.
2. Is there an existing Support Center (SC) ready to support this Virtual Organization? If a support center is ready to support this Virtual Organization, the user will be able to select his or her support center when registering the VO and should continue with registration. If not, the user will need to register a support center using these instructions.
3. Enter VO information The user will be prompted to enter the VO information. See the detailed information here for help with the fields here.
4. GOC Review and Confirm Relationship to OSG The GOC will respond to any incomplete or inaccurate VO registrations with a request to update the registration information. The GOC will filter out any spam or inappropriate registrations, accept completed registration information and the virtual organization will be included in the next Operations meeting agenda. At this time the Operational Contacts are subscribed to the osg-general, osg-operations, vo-admins and osg-ops-status mailing lists.
5. OSG Users Group Informed and EB Approval The GOC will inform the OSG Users group coordinators of the new VO. The OSG Users Group is tasked with understanding the context and expectation of the new VO. They recommend to the EB when/whether the registration be accepted. Once approval is granted, the VO is activated and the VO continues to the next step.
6. Test VO Infrastructure, Representation at Ops Meeting and Trash/Integration into OSG software When the Virtual Organization Membership System (VOMS) is working and any problems have been resolved through the Operations meeting, the community will be notified and the VO package will be updated. If this process is incomplete, the user will be notified. The GOC will continue to test the VOMS until it is working, and request Operations meeting attendance if that has not been fulfilled.

How to register a VO Support Center with the OIM?

The process begins at the OIM portal. OIM uses the OSG CA issued certificate in a browser or keychain to establish the identity of the user. OIM then compares the information in the certificate against the registered users database to determine whether the visitor is a registered user or not.

Note for International EGI/NGI Sites - If your VO is already a member of EGI or an NGI this process will work for you. If you are using the GGUS ticketing system please pick GGUS as your Support Center.

Step in Process Explanation
1. Is the user registered? If the user is registered, she or he will be able to authenticate and proceed into the registered user area of OIM. If not, the user will be prompted to complete the personal registration process.
2. Enter SC information The user will be prompted to enter the SC information. See the detailed information here for help with the fields here.
3. GOC Review and Confirm Relationship to OSG The GOC will respond to any incomplete or inaccurate SC registrations with a request to update the registration information. The GOC will filter out any spam or inappropriate registrations, accept completed registration information and the virtual organization will be included in the next Operations meeting agenda. At this time the Operational Contacts are subscribed to the osg-general, osg-operations, vo-admins and osg-ops-status mailing lists.
4. Ticket System Integration If a registrant is using a ticket system as a point of contact for a support center, they should notify the GOC and the GOC will work with registrants to ensure compatibility between our system and his or her system.
5. Test Support Infrastructure and Representation at Ops Meeting When the necessary ticket exchange is working and any problems have been resolved through the Operations meeting, the support center will be activated and the ticket will be closed. The registrant will be notified of any steps that remain to complete this process.

References

Problem Resolution and Help

Please create a ticket by using this link if you need any further assistance with OIM, or you can use the phone number or email provided here if you are unable to make a ticket.

Comments

Topic attachments
I Attachment Action Size Date Who Comment
pngpng Flow3.png manage 99.1 K 06 Aug 2008 - 16:29 RobQ  
jpgjpg oim-personal.jpg manage 63.8 K 08 Sep 2010 - 14:50 ElizabethChism this is a flowchart with instructions on registering for a personal OIM account
jpgjpg resource.jpg manage 172.2 K 29 Sep 2010 - 07:47 ElizabethChism this is a flowchart with instructions on registering a resource in OIM
Topic revision: r36 - 01 Dec 2016 - 20:53:27 - KyleGross
Hello, TWikiGuest
Register

 
TWIKI.NET

TWiki | Report Bugs | Privacy Policy

This site is powered by the TWiki collaboration platformCopyright by the contributing authors. All material on this collaboration platform is the property of the contributing authors..