Dear all,
Many of you have seen the news [1] about the EOSC EU NODE going into production.
You can all (actually you should) try and login and see how that looks like/works: https://open-science-cloud.ec.europa.eu/
One important feature is that users can log into the EU NODE with either their eduGAIN/ National Federation account or with the EU Login (the one that is used to login into the EC portal for the grant management).
For users that login using they the federated credentials it is essential that the IdPs release the necessary attributes. As you know this has been a long standing issue and one that IMHO may lead to make federations not fit for purpose if things do not change.
GEANT is leading the EOSC AAI and Christos has prepared a page that explain what is required: https://wiki.geant.org/display/MyAccessID/Attribute+Requirements%EF%BF%BC
It would be great if you share this information with your IdPs to ensure their users can get credits to use the services on the EU NODE.
Cheers, Licia
[1] https://nordu.net/milestone-for-european-open-science/ ------
Licia Florio
Senior Strategy and Policy Officer
NORDUnet A/S Kastruplundgade 22, 1, DK-2770 Kastrup
Cell phone: +31653928443
Feedback to whomever it may concern:
- It required me to do two full logins with "Sunet - Connect" as an IdP in order to get to the user agreement page - Might look into updating to the newer version of SeamlessAccess that is more user friendly, and aspires to continuously follow the web accessibility guidelines for WCAG 2.1 - The link to the privacy statement is broken - is: https://www.open-science-cloud.ec.europa.eu/support/privacy-statement-EOSC-E... - should be: https://open-science-cloud.ec.europa.eu/privacy-statement - The arrow by the email address is confusing when there is only one choice [image: Screenshot 2024-10-31 at 15.22.30.png] - After logging in twice, accepting the different policies, reaching the Screen "...wait several seconds" and clicking next I am once again asked to sign in - After logging in three times, waiting several seconds, I am asked to sign in for a fourth time - The link to the "User Access Policy" opens in the same window which takes you away from the service, instead of opening in a separate window/a separate tab[image: Screenshot 2024-10-31 at 15.27.56.png] - Explaining in this window how to reach the Helpdesk could be useful (where on the website, or an address, or again a clickable link) even though it is quite clear once you're in the service and click around - It could be made more clear that this is a search bar not a list, the search bar lacks som accessibility features[image: Screenshot 2024-10-31 at 15.34.41.png] - Clicking Log out takes you to a page called Resource hub rather than confirm you've been logged out
On Thu, Oct 31, 2024 at 2:43 PM Licia Florio licia@nordu.net wrote:
Dear all,
Many of you have seen the news [1] about the EOSC EU NODE going into production.
You can all (actually you should) try and login and see how that looks like/works: https://open-science-cloud.ec.europa.eu/
One important feature is that users can log into the EU NODE with either their eduGAIN/ National Federation account or with the EU Login (the one that is used to login into the EC portal for the grant management).
For users that login using they the federated credentials it is essential that the IdPs release the necessary attributes. As you know this has been a long standing issue and one that IMHO may lead to make federations not fit for purpose if things do not change.
GEANT is leading the EOSC AAI and Christos has prepared a page that explain what is required: Attribute Requirements - MyAccessID - GÉANT federated confluence https://wiki.geant.org/display/MyAccessID/Attribute+Requirements wiki.geant.org https://wiki.geant.org/display/MyAccessID/Attribute+Requirements [image: favicon.ico] https://wiki.geant.org/display/MyAccessID/Attribute+Requirements https://wiki.geant.org/display/MyAccessID/Attribute+Requirements
It would be great if you share this information with your IdPs to ensure their users can get credits to use the services on the EU NODE.
Cheers, Licia
[1] https://nordu.net/milestone-for-european-open-science/
Licia Florio
Senior Strategy and Policy Officer
NORDUnet A/S Kastruplundgade 22, 1, DK-2770 Kastrup
Cell phone: +31653928443
Identity-talks mailing list -- identity-talks@lists.nordu.net To unsubscribe send an email to identity-talks-leave@lists.nordu.net
Hello Zacharias,
thank you for the constructive feedback. I will pass it pack to the team operating the EU Node. I would like to stay on the topic of the multiple logins. This should not have been the case. Can you please verify that your Identity Provider properly supports Single Sign On or that you do have not selected to consent every single time you are accessing a service?
Kind regards,
Christos
On 31 Oct 2024, at 15:38, Zacharias Törnblom via Identity-talks wrote:
Feedback to whomever it may concern:
- It required me to do two full logins with "Sunet - Connect" as an
IdP in order to get to the user agreement page
- Might look into updating to the newer version of SeamlessAccess
that is more user friendly, and aspires to continuously follow the web accessibility guidelines for WCAG 2.1
- The link to the privacy statement is broken
- is:
https://www.open-science-cloud.ec.europa.eu/support/privacy-statement-EOSC-EU-Node - should be:https://open-science-cloud.ec.europa.eu/privacy-statement
- The arrow by the email address is confusing when there is only
one choice [image: Screenshot 2024-10-31 at 15.22.30.png]
- After logging in twice, accepting the different policies,
reaching the Screen "...wait several seconds" and clicking next I am once again asked to sign in
- After logging in three times, waiting several seconds, I am asked
to sign in for a fourth time
- The link to the "User Access Policy" opens in the same window
which takes you away from the service, instead of opening in a separate window/a separate tab[image: Screenshot 2024-10-31 at 15.27.56.png]
- Explaining in this window how to reach the Helpdesk could be
useful (where on the website, or an address, or again a clickable link) even though it is quite clear once you're in the service and click around
- It could be made more clear that this is a search bar not a list,
the search bar lacks som accessibility features[image: Screenshot 2024-10-31 at 15.34.41.png]
- Clicking Log out takes you to a page called Resource hub rather
than confirm you've been logged out
On Thu, Oct 31, 2024 at 2:43 PM Licia Florio licia@nordu.net wrote:
Dear all,
Many of you have seen the news [1] about the EOSC EU NODE going into production.
You can all (actually you should) try and login and see how that looks like/works: https://open-science-cloud.ec.europa.eu/
One important feature is that users can log into the EU NODE with either their eduGAIN/ National Federation account or with the EU Login (the one that is used to login into the EC portal for the grant management).
For users that login using they the federated credentials it is essential that the IdPs release the necessary attributes. As you know this has been a long standing issue and one that IMHO may lead to make federations not fit for purpose if things do not change.
GEANT is leading the EOSC AAI and Christos has prepared a page that explain what is required: Attribute Requirements - MyAccessID - GÉANT federated confluence https://wiki.geant.org/display/MyAccessID/Attribute+Requirements wiki.geant.org https://wiki.geant.org/display/MyAccessID/Attribute+Requirements [image: favicon.ico] https://wiki.geant.org/display/MyAccessID/Attribute+Requirements https://wiki.geant.org/display/MyAccessID/Attribute+Requirements
It would be great if you share this information with your IdPs to ensure their users can get credits to use the services on the EU NODE.
Cheers, Licia
[1] https://nordu.net/milestone-for-european-open-science/
Licia Florio
Senior Strategy and Policy Officer
NORDUnet A/S Kastruplundgade 22, 1, DK-2770 Kastrup
Cell phone: +31653928443
Identity-talks mailing list -- identity-talks@lists.nordu.net To unsubscribe send an email to identity-talks-leave@lists.nordu.net
Identity-talks mailing list -- identity-talks@lists.nordu.net To unsubscribe send an email to identity-talks-leave@lists.nordu.net
You are of course correct. We do not allow for SSO. Activating a second factor/security key is required with each sign in. Reporting back because the four signins required became evident because of our IdP-policy.
On Thu, Oct 31, 2024 at 4:01 PM Christos Kanellopoulos < christos.kanellopoulos@geant.org> wrote:
Hello Zacharias,
thank you for the constructive feedback. I will pass it pack to the team operating the EU Node. I would like to stay on the topic of the multiple logins. This should not have been the case. Can you please verify that your Identity Provider properly supports Single Sign On or that you do have not selected to consent every single time you are accessing a service?
Kind regards,
Christos
On 31 Oct 2024, at 15:38, Zacharias Törnblom via Identity-talks wrote:
Feedback to whomever it may concern:
- It required me to do two full logins with "Sunet - Connect" as an
IdP in order to get to the user agreement page
- Might look into updating to the newer version of SeamlessAccess that
is more user friendly, and aspires to continuously follow the web accessibility guidelines for WCAG 2.1
- The link to the privacy statement is broken
https://www.open-science-cloud.ec.europa.eu/support/privacy-statement-EOSC-E...
- is:
https://open-science-cloud.ec.europa.eu/privacy-statement
- should be:
- The arrow by the email address is confusing when there is only one
choice [image: Screenshot 2024-10-31 at 15.22.30.png]
- After logging in twice, accepting the different policies, reaching
the Screen "...wait several seconds" and clicking next I am once again asked to sign in
- After logging in three times, waiting several seconds, I am asked to
sign in for a fourth time
- The link to the "User Access Policy" opens in the same window which
takes you away from the service, instead of opening in a separate window/a separate tab[image: Screenshot 2024-10-31 at 15.27.56.png]
- Explaining in this window how to reach the Helpdesk could be useful
(where on the website, or an address, or again a clickable link) even though it is quite clear once you're in the service and click around
- It could be made more clear that this is a search bar not a list,
the search bar lacks som accessibility features[image: Screenshot 2024-10-31 at 15.34.41.png]
- Clicking Log out takes you to a page called Resource hub rather than
confirm you've been logged out
On Thu, Oct 31, 2024 at 2:43 PM Licia Florio licia@nordu.net wrote:
Dear all,
Many of you have seen the news [1] about the EOSC EU NODE going into production.
You can all (actually you should) try and login and see how that looks like/works: https://open-science-cloud.ec.europa.eu/
One important feature is that users can log into the EU NODE with either their eduGAIN/ National Federation account or with the EU Login (the one that is used to login into the EC portal for the grant management).
For users that login using they the federated credentials it is essential that the IdPs release the necessary attributes. As you know this has been a long standing issue and one that IMHO may lead to make federations not fit for purpose if things do not change.
GEANT is leading the EOSC AAI and Christos has prepared a page that explain what is required: wiki.geant.org[image: favicon.ico]
Attribute Requirements - MyAccessID - GÉANT federated confluence https://wiki.geant.org/display/MyAccessID/Attribute+Requirements
It would be great if you share this information with your IdPs to ensure their users can get credits to use the services on the EU NODE.
Cheers, Licia
[1] https://nordu.net/milestone-for-european-open-science/
Licia Florio
Senior Strategy and Policy Officer
NORDUnet A/S Kastruplundgade 22, 1, DK-2770 Kastrup
Cell phone: +31653928443
Identity-talks mailing list -- identity-talks@lists.nordu.net To unsubscribe send an email to identity-talks-leave@lists.nordu.net
Identity-talks mailing list -- identity-talks@lists.nordu.net To unsubscribe send an email to identity-talks-leave@lists.nordu.net
identity-talks@lists.nordu.net
-
Christos Kanellopoulos -
Licia Florio -
Zacharias Törnblom