Registration: Difference between revisions

From bwCloud-OS
Jump to navigation Jump to search
← Older edit
VisualWikitext
Admin (talk | contribs)
Bureaucrats, Interface administrators, intern, Suppressors, Administrators, translationadmin, translator
736 edits
No edit summary
 
(126 intermediate revisions by 2 users not shown)
Line 1: Line 1:
<span id="In-a-Nutshell"></span>
{{InANutshell|
<li>Access to bwCloud-OS requires an active account from a '''bwIDM'''-participating institution.</li>
<li>Your account must include a valid '''entitlement''', assigned by your '''home institution'''. This is usually automatic. If it is missing (see [[Registration#How_can_I_find_out_which_entitlements_my_account_contains?|here]]), contact your institution’s IT support. The bwCloud-OS team cannot assign entitlements.</li>
<li>Log in once to the [https://portal.bw-cloud.org/ '''Dashboard'''] to activate your profile. Setup is automated via bwIDM.</li>
<li>After login, select your '''region''' as described [[Registration#Region-Selection|here]] to begin using bwCloud-OS.</li>}}


__TOC__
= Entitlements =
= Entitlements =
Diese Seite erläutert die für die Nutzung der bwCloud erforderlichen **bwIDM-Entitlements** (bwCloud-Basic, bwCloud-Extended) und deren Auswirkungen auf Zugang, Ressourcen und Betriebsregeln.
<span id="was-sind-entitlements"></span>
== What are "Entitlements" or "bwIDM Entitlements"? ==
Every member of an institution (university, college, PH, HAW etc.) in Baden-Württemberg has a personal account to log on to and use the IT services provided by the institution. If the Institution is a member of the [https://www.bwidm.de/  federated identity management of Baden-Württemberg universities bwIDM], then associates of this institution can apply for further use of IT services offered by other locations.
In order that these "external" IT services "know" who the user is, the following information is provided during registration and/or usage of the external IT service and some data of the user(s) is transmitted to the IT service. The federated Identity management also ensures through the mutual trust model that the external IT service knows that the user really exists at the respective institution (validation of the account).
In context of the bwIDM Federation, the participating institutions have agreed on a minimum data set, which is transmitted to the external IT service. This data record includes, for example Attribute1 like eduPersonalPrincipalName, mail or givenName. These are so-called "standard attributes".
However, some IT services require specific information, such as whether a home institution is permitted to use a foreign IT service at all. This specific information can be added to the personal account of the user(s) via additional assignments of a special attribute (eduPersonEntitlement).
<span id="welche-entitlements-notwendig"></span>
== Which Entitlements do I need to use bwCloud-OS? ==
To use the bwCloud-OS you need at least one of the two entitlements:
* bwCloud-Basic
* bwCloud-Extended
Accounts can also include both entitlement elements - in this case the "higher ranking" entitlement element ('''bwCloud-Extended''') is evaluated and applied.
== What is regulated with the Entitlements? Why do I need these Entitlements? ==
The entitlements serve several purposes. The most important points in the overview:
# Entitlements answer the question of ''who is allowed access to bwCloud and who is not'' by the home locations  The users' home locations independently decide on the allocation of entitlements to their members - and thus ultimately who and how the bwCloud should be used.  On our side applies from 01.10.2019: No release by the home institution via Entitlement = No access to bwCloud
# With the entitlements we control how many resources a user is allowed to use  The following applies: the flavor table is the basis for differentiation
## Users who only have the bwCloud-Basic entitlement can start an instance of either "nano" or "tiny". This is a kind of "trial access" and is mainly targeted at students. Instances of this flavor are free of charge.
## Users who have the "bwCloud-Extended" entitlement will be given significantly more quotas and can therefore use all the flavors offered. The use of the bwCloud will incur costs in the future.
# With the Entitlements we regulate how we handle the instances  The Eentitlement bwCloud-Basic is mainly addressed to students who want to use the bwCloud for various purposes such as theses or as a software repository. Since there is a large number of students in Baden-Württemberg, we expect a correspondingly large number of small VMs to accumulate over time. At the same time, we assume that these VMs will not really be deleted immediately when their original purpose is no longer applicable. We will therefore regularly delete all VMs started by users with entitlement ''bwCloud-Basic'' to "clean up" our systems and to give other users the chance to start an instance. The bwIDM Entitlement bwCloud-Basic is not intended to run a (system) service permanently.  With bwCloud-Extended these restrictions do not exist. Here the following applies: the VMs run until they are independently deleted by the users.
# With the entitlements we know who can potentially pay for the virtual machines  To ensure the sustainable operation of the bwCloud and a regular exchange of hardware and software In order to be able to ensure this, it is necessary to charge for the services used. We therefore would like to establish a cost allocation model. With the income generated in this way, we intend to renew our hardware infrastructure regularly and adapt it to requirements. In order to be able to avoid individual invoices with the users, we are going to generate so-called collective overviews and invoices", because only the home regions know their users and know who has the appropriate resources to operate VMs. With the award of the Entitlements bwCloud Extended for a user, the respective home region signals two things:
## the user has access to an account with appropriate means and that
## the home site can therefore pay the total bill for the resource consumption of all users of the site.  How the costs are then allocated internally at the home site is again a matter for the respective site and can be organised individually and according to their local guidelines. Resources operated with the bwIDM Entitlement bwCloud-Basic remain free of charge: this flavor is supported by the Ministry of Science, Research and the Arts (MWK).
# We accelerate the registration process  Through the automated evaluation of the bwIDM Entitlements in the course of the registration for the service, users receive immediate feedback when the account has been set up in the bwCloud. No manual interaction from our side is necessary anymore - and so everybody wins: Users enter the bwCloud within minutes and we don't have to activate anyone manually anymore.
== How can I find out which entitlements my account contains? ==
To find out which Entitlements are linked to an account, you can for example log into the "[https://login.bwidm.de/welcome/index.xhtml RegApp]" or the [https://bw-support.scc.kit.edu bwSupportPortal].
When logging into a RegApp or into the bwSupportPortal an overview of the data to be transmitted is displayed. This overview also includes the supplied Entitlements (see screenshot).
[[File:Screenshot login bwSupportPortal.png|thumb|left|358x358px]]


== What are "bwIDM" and "entitlements"? ==
<span id="Entitlements"></span>


Every member of a higher education institution in Baden-Württemberg  (university, college, PH, HAW, etc.) has a personal account for accessing the IT services provided by their institution. If the institution participates in the federated identity management system  [https://www.bwidm.de/ '''bwIDM'''], its members can also apply for additional IT services offered by other participating institutions.


To allow external IT services to identify users, certain personal data is transmitted during registration and/or use of the service. Federated identity management ensures, through a model of mutual trust, that the external service can verify the user’s affiliation with their institution — confirming that the account is valid and the user is officially recognized. Within the bwIDM Federation, participating institutions have agreed on a minimum set of personal data that is transmitted to external IT services. This includes standard attributes such as <code>eduPersonPrincipalName</code>, <code>mail</code>, and <code>givenName</code>.


Some services, however, require additional information — for example, whether a user’s home institution is authorized to access a particular external service. This is handled through the assignment of special attributes, such as <code>eduPersonEntitlement</code>, to the user's account.


== Which entitlements are required to use bwCloud-OS? ==
<span id="Entitlements-bwCloud-OS"></span>


To access and use bwCloud-OS, you need a valid bwCloud(-OS) entitlement. A detailed overview of current regulations can be found on the page [[Entitlements in bwCloud-OS]].


'''📌 Note:''' The bwCloud(-OS) entitlement model is currently being restructured and subject to change.


== How can I find out which entitlements my account contains?==
<span id="My-Entitlements"></span>


To view information about bwIDM services linked to your account, log in to the "[https://login.bwidm.de/welcome/index.xhtml RegApp]".


For detailed information on the entitlements associated with your account (including those for services not yet registered), navigate to:


'''Index → Personal Data → Shibboleth'''


In the '''Value''' column, you should see entries such as <code>bwCloud-Basic</code> or <code>bwCloud-Extended</code>. If such an entry containing <code>bwCloud</code> exists, you are entitled to register for and use bwCloud-OS. Which specific entitlement you have is determined by your home institution and cannot be changed by you or the bwCloud-OS team.


== What do I do if my account has no bwCloud entitlement assigned to it? ==
== What should I do if my account has no bwCloud-OS entitlement assigned? ==
The assignment of the entitlement is the sole responsibility of the respective user location. We from bwCloud ''cannot add or remove Entitlements'' to user accounts! In this case, please contact the central IT service facility (computer center, IT service center, service center, ...) and request the assignment of the desired entitlement element.
<span id="No-Entitlements"></span>


The assignment of entitlements is exclusively managed by your home institution. The bwCloud-OS team does '''not''' have the authority to add or remove entitlements on user accounts.


If your account lacks the necessary entitlement, please contact your institution’s central IT service department or service desk.


= Regions =  
= Regions =  


== What does "region" mean in bwCloud-OS? ==
<span id="Regions"></span>


== Was bedeutet "Regionen" in der bwCloud? ==
In bwCloud-OS, a '''region''' refers to one of the four operating sites: '''Freiburg''', '''Karlsruhe''', '''Mannheim''', and '''Ulm'''. Each region runs its own infrastructure but is accessible through a shared interface ([https://portal.bw-cloud.org/ Dashboard]).
Die bwCloud besteht aus derzeit '''vier unterschiedlichen Betriebsstandorten = Regionen''', die über eine gemeinsame Oberfläche (Dashboard oder Portal) ausgewählt und administriert werden können. Jeder der vier Betriebsstandorte agiert dabei als eigenständige Region. Das bedeutet: laufende Instanzen in der Region Mannheim bekommen gemäß der Konfiguration der Mannheimer Region entsprechend eine IP-Adresse. Die IP-Adresse ist Mannheim spezifisch und kann nicht in eine andere Region umziehen.
 
 
 
== Was ist eine "Heimatregion"? ==
Jede_r Nutzer_in der bwCloud bekommt bei der Einrichtung initial eine '''Heimatregion''' zugeordnet. Für Nutzer_innen aus den vier Betriebsstandorten ist diese Zuordnung natürlich trivial. Bei Nutzer_innen von anderen Standorten haben wir uns an der Netzwerktopologie des BelWü orientiert. Ziel der derzeitigen Zuordnung ist die möglichst kürzeste Verbindung des jeweiligen Standortes zu einem unserer Betriebsstandorte.
 
 
Folgende Tabelle gibt eine grobe Übersicht über die aktuelle Verteilung der Nutzer_innen:
{| class="wikitable"
|'''Nutzerstandort'''
|'''Region/Betreiberstandort'''
|-
|Baden-Baden
| rowspan="4" |Karlsruhe
|-
|Karlsruhe
|-
|KIT
|-
|Pforzheim
|-
|Rastatt
|
|-
|Offenburg
| rowspan="3" |Freiburg
|-
|Freiburg
|-
|Furtwangen
|-
|Aalen
| rowspan="7" |Ulm
|-
|Albsing
|-
|Bieberach
|-
|Esslingen
|-
|Heidenheim
|-
|Hohenheim
|-
|Ulm
|-
|Weingarten
|
|-
|Gmünd
| rowspan="12" |Mannheim
|-
|Heidelberg
|-
|Heilbronn
|-
|Ludwigsburg
|-
|Mannheim
|-
|Rottenburg
|-
|Stuttgart
|-
|BSZ-BW
|-
|DHBW-VS
|-
|Konstanz
|-
|Reutlingen
|-
|Tübingen
|-
| colspan="2" |Alle anderen Standorte
|}
Stand: Juli 2018
 
 
Zur Bestimmung der Heimatregion werten wir die "Affiliation" der Nutzer_innen bei der Registrierung aus. Sollte ein_e Nutzer_in von einem Standort kommen, der nicht in der Tabelle explizit aufgeführt ist, wird die Region Freiburg als Standard-Heimatregion eingetragen.
 
 


Heimtregion, Zuordnung, BelWü
Resources such as virtual machines (VMs, instances), networks, and storage are bound to the region in which they are created. For example, an instance launched in the Mannheim region will receive an IP address from Mannheim’s specific IP range(s) — this address cannot be transferred to another region.


You can switch between regions in the Dashboard interface as described [[Registration#Region-Selection|here]].


== Wo wähle ich die Region im Dashboard aus? ==
== What is my "home region"? ==
In der linken Hälfte der obersten Navigationszeile im Dashboard kann man auf ein Drop-Down Menü klicken um sich die Regionen anzuzeigen. Die aktuell ausgewählte Region ist mit einem Haken gekennzeichnet. Ein Klick auf die jeweilige Region wechselt dorthin.
<span id="Home-Region"></span>


In bwCloud-OS, each user is initially assigned a '''home region''' during account setup. For users from one of the four operating sites (Freiburg, Karlsruhe, Mannheim, Ulm), this assignment is straightforward. For users from other institutions, the assignment is based on the network topology of [https://www.belwue.de/ BelWue] — aiming to route each user to the nearest operating site for optimal connectivity. However, you can [[Projects and Quota#Group-Project-Application|apply for a project]] with resources (also) in other regions.


== Weiterführende Informationen ==
A table showing the current home region assignments can be found [[Regions|here]].
* [[Erste Schritte]] – Registrierung und Einstieg in die Nutzung
* [[Projekte & Quota]] – Projektarten, Quota-Erhöhungen
* [[Netzwerk & Sicherheit]] – Netze, IP-Adressen, Security Groups, DNS/FQDN


== Where do I select the region in the Dashboard? ==
<span id="Region-Selection"></span>


== Anmerkungen & Quellen ==
You can select a region from the drop-down menu located on the left side of the top navigation bar in the [https://portal.bw-cloud.org/ Dashboard]. The currently active region is marked with a checkmark. Simply click on a different region in the list to switch to it.
<references/>
[[File:Region selection.png|center|thumb|722x722px]]

Latest revision as of 18:07, 10 November 2025

In a Nutshell
  • Access to bwCloud-OS requires an active account from a bwIDM-participating institution.
  • Your account must include a valid entitlement, assigned by your home institution. This is usually automatic. If it is missing (see here), contact your institution’s IT support. The bwCloud-OS team cannot assign entitlements.
  • Log in once to the Dashboard to activate your profile. Setup is automated via bwIDM.
  • After login, select your region as described here to begin using bwCloud-OS.


Entitlements

What are "bwIDM" and "entitlements"?

Every member of a higher education institution in Baden-Württemberg (university, college, PH, HAW, etc.) has a personal account for accessing the IT services provided by their institution. If the institution participates in the federated identity management system bwIDM, its members can also apply for additional IT services offered by other participating institutions.

To allow external IT services to identify users, certain personal data is transmitted during registration and/or use of the service. Federated identity management ensures, through a model of mutual trust, that the external service can verify the user’s affiliation with their institution — confirming that the account is valid and the user is officially recognized. Within the bwIDM Federation, participating institutions have agreed on a minimum set of personal data that is transmitted to external IT services. This includes standard attributes such as eduPersonPrincipalName, mail, and givenName.

Some services, however, require additional information — for example, whether a user’s home institution is authorized to access a particular external service. This is handled through the assignment of special attributes, such as eduPersonEntitlement, to the user's account.

Which entitlements are required to use bwCloud-OS?

To access and use bwCloud-OS, you need a valid bwCloud(-OS) entitlement. A detailed overview of current regulations can be found on the page Entitlements in bwCloud-OS.

📌 Note: The bwCloud(-OS) entitlement model is currently being restructured and subject to change.

How can I find out which entitlements my account contains?

To view information about bwIDM services linked to your account, log in to the "RegApp".

For detailed information on the entitlements associated with your account (including those for services not yet registered), navigate to:

Index → Personal Data → Shibboleth

In the Value column, you should see entries such as bwCloud-Basic or bwCloud-Extended. If such an entry containing bwCloud exists, you are entitled to register for and use bwCloud-OS. Which specific entitlement you have is determined by your home institution and cannot be changed by you or the bwCloud-OS team.

What should I do if my account has no bwCloud-OS entitlement assigned?

The assignment of entitlements is exclusively managed by your home institution. The bwCloud-OS team does not have the authority to add or remove entitlements on user accounts.

If your account lacks the necessary entitlement, please contact your institution’s central IT service department or service desk.

Regions

What does "region" mean in bwCloud-OS?

In bwCloud-OS, a region refers to one of the four operating sites: Freiburg, Karlsruhe, Mannheim, and Ulm. Each region runs its own infrastructure but is accessible through a shared interface (Dashboard).

Resources such as virtual machines (VMs, instances), networks, and storage are bound to the region in which they are created. For example, an instance launched in the Mannheim region will receive an IP address from Mannheim’s specific IP range(s) — this address cannot be transferred to another region.

You can switch between regions in the Dashboard interface as described here.

What is my "home region"?

In bwCloud-OS, each user is initially assigned a home region during account setup. For users from one of the four operating sites (Freiburg, Karlsruhe, Mannheim, Ulm), this assignment is straightforward. For users from other institutions, the assignment is based on the network topology of BelWue — aiming to route each user to the nearest operating site for optimal connectivity. However, you can apply for a project with resources (also) in other regions.

A table showing the current home region assignments can be found here.

Where do I select the region in the Dashboard?

You can select a region from the drop-down menu located on the left side of the top navigation bar in the Dashboard. The currently active region is marked with a checkmark. Simply click on a different region in the list to switch to it.

Retrieved from "https://wiki.bwcloud-os.de/index.php?title=Registration&oldid=1511"