Registration: Difference between revisions

From bwCloud-OS
Jump to navigation Jump to search
No edit summary
Line 5: Line 5:
<li>Log in once to the [https://portal.bw-cloud.org/ '''Dashboard'''] to activate your profile. Setup is automated via bwIDM.</li>
<li>Log in once to the [https://portal.bw-cloud.org/ '''Dashboard'''] to activate your profile. Setup is automated via bwIDM.</li>
<li>After login, select your '''region''' as described [[Registration#Region-Selection|here]] to begin using bwCloud-OS.</li>}}
<li>After login, select your '''region''' as described [[Registration#Region-Selection|here]] to begin using bwCloud-OS.</li>}}


__TOC__
__TOC__
= Entitlements =


== What are "bwIDM" and "entitlements"? ==
== Automated resource provisioning ==
<span id="Entitlements"></span>


Every member of a higher education institution in Baden-Württemberg  (university, college, PH, HAW, etc.) has a personal account for accessing the IT services provided by their institution. If the institution participates in the federated identity management system  [https://www.bwidm.de/ '''bwIDM'''], its members can also apply for additional IT services offered by other participating institutions.
During the registration on bwIDM for the bwCloud-OS service, the following steps are streamedlined:


To allow external IT services to identify users, certain personal data is transmitted during registration and/or use of the service. Federated identity management ensures, through a model of mutual trust, that the external service can verify the user’s affiliation with their institution — confirming that the account is valid and the user is officially recognized. Within the bwIDM Federation, participating institutions have agreed on a minimum set of personal data that is transmitted to external IT services. This includes standard attributes such as <code>eduPersonPrincipalName</code>, <code>mail</code>, and <code>givenName</code>.
# A user registers himself/ herself.
# bwIDM requests the creation of a user account by the bwCloud-OS and forwards a set of user data.
# The bwCloud-OS parses the user data, including given [[Entitlements in bwCloud-OS|entitlements]].
# Based on these data, a user account and a start [[Projects and Quota|project]] is created. The [[Entitlements in bwCloud-OS#Quota flavors|quota flavor]] given in the entitlement defines the project quota. If more than one [[Entitlements in bwCloud-OS#Quota Entitlements|quota eligibilities]] are given, a random one is chosen.[[Projects and Quota#How can I change the eligibility of a project?|The eligibility can later on be changed.]]


Some services, however, require additional information — for example, whether a user’s home institution is authorized to access a particular external service. This is handled through the assignment of special attributes, such as <code>eduPersonEntitlement</code>, to the user's account.
== FAQ ==


== Which entitlements are required to use bwCloud-OS? ==
=== What is "bwIDM" and why does it know me? ===
<span id="Entitlements-bwCloud-OS"></span>
Every member of a higher education institution in Baden-Württemberg  (university, college, PH, HAW, etc.) has a personal account for accessing the IT services provided by their institution. If the institution participates in the federated identity management system  [https://www.bwidm.de/ '''bwIDM'''], its members can also apply for additional IT services offered by other participating institutions.


To allow external IT services to identify users, certain personal data is transmitted via bwIDM to these services during registration and use of the service. Federated identity management ensures, through a model of mutual trust, that the external service can verify the user’s affiliation with their institution — confirming that the account is valid and the user is officially recognized. Within the bwIDM Federation, participating institutions have agreed on a minimum set of personal data that is transmitted to external IT services. This includes standard attributes such as <code>eduPersonPrincipalName</code>, <code>mail</code>, <code>givenName</code> or <code>eduPersonEntitlement</code>.
=== Which entitlements are required to use bwCloud-OS? ===
To access and use bwCloud-OS, you need a valid bwCloud(-OS) entitlement. A detailed overview of current regulations can be found on the page [[Entitlements in bwCloud-OS]].
To access and use bwCloud-OS, you need a valid bwCloud(-OS) entitlement. A detailed overview of current regulations can be found on the page [[Entitlements in bwCloud-OS]].


'''📌 Note:''' The bwCloud(-OS) entitlement model is currently being restructured and subject to change.
'''📌 Note:''' The bwCloud(-OS) entitlement model is currently being restructured and subject to change.


== How can I find out which entitlements my account contains?==
=== How can I find out which entitlements my account contains? ===
<span id="My-Entitlements"></span>
 
To view information about bwIDM services linked to your account, log in to the "[https://login.bwidm.de/welcome/index.xhtml RegApp]".
To view information about bwIDM services linked to your account, log in to the "[https://login.bwidm.de/welcome/index.xhtml RegApp]".


Line 37: Line 38:
In the '''Value''' column, you should see entries such as <code>bwCloud-Basic</code> or <code>bwCloud-Extended</code>. If such an entry containing <code>bwCloud</code> exists, you are entitled to register for and use bwCloud-OS. Which specific entitlement you have is determined by your home institution and cannot be changed by you or the bwCloud-OS team.
In the '''Value''' column, you should see entries such as <code>bwCloud-Basic</code> or <code>bwCloud-Extended</code>. If such an entry containing <code>bwCloud</code> exists, you are entitled to register for and use bwCloud-OS. Which specific entitlement you have is determined by your home institution and cannot be changed by you or the bwCloud-OS team.


== What should I do if my account has no bwCloud-OS entitlement assigned? ==
=== What should I do if my account has no bwCloud-OS entitlement assigned? ===
<span id="No-Entitlements"></span>
 
The assignment of entitlements is exclusively managed by your home institution. The bwCloud-OS team does '''not''' have the authority to add or remove entitlements on user accounts.
The assignment of entitlements is exclusively managed by your home institution. The bwCloud-OS team does '''not''' have the authority to add or remove entitlements on user accounts.


If your account lacks the necessary entitlement, please contact your institution’s central IT service department or service desk.
If your account lacks the necessary entitlement, please contact your institution’s central IT service department or service desk.


= Regions =
=== What does "region" mean in bwCloud-OS? ===
 
== What does "region" mean in bwCloud-OS? ==
<span id="Regions"></span>
 
In bwCloud-OS, a '''region''' refers to one of the four operating sites: '''Freiburg''', '''Karlsruhe''', '''Mannheim''', and '''Ulm'''. Each region runs its own infrastructure but is accessible through a shared interface ([https://portal.bw-cloud.org/ Dashboard]).
In bwCloud-OS, a '''region''' refers to one of the four operating sites: '''Freiburg''', '''Karlsruhe''', '''Mannheim''', and '''Ulm'''. Each region runs its own infrastructure but is accessible through a shared interface ([https://portal.bw-cloud.org/ Dashboard]).


Line 55: Line 50:
You can switch between regions in the Dashboard interface as described [[Registration#Region-Selection|here]].
You can switch between regions in the Dashboard interface as described [[Registration#Region-Selection|here]].


== What is my "home region"? ==
=== What is my "home region"? ===
<span id="Home-Region"></span>
 
In bwCloud-OS, each user is initially assigned a '''home region''' during account setup. For users from one of the four operating sites (Freiburg, Karlsruhe, Mannheim, Ulm), this assignment is straightforward. For users from other institutions, the assignment is based on the network topology of [https://www.belwue.de/ BelWue] — aiming to route each user to the nearest operating site for optimal connectivity. However, you can [[Projects and Quota#Group-Project-Application|apply for a project]] with resources (also) in other regions.
In bwCloud-OS, each user is initially assigned a '''home region''' during account setup. For users from one of the four operating sites (Freiburg, Karlsruhe, Mannheim, Ulm), this assignment is straightforward. For users from other institutions, the assignment is based on the network topology of [https://www.belwue.de/ BelWue] — aiming to route each user to the nearest operating site for optimal connectivity. However, you can [[Projects and Quota#Group-Project-Application|apply for a project]] with resources (also) in other regions.


A table showing the current home region assignments can be found [[Regions|here]].  
A table showing the current home region assignments can be found [[Regions|here]].  


== Where do I select the region in the Dashboard? ==
=== Where do I select the region in the Dashboard? ===
<span id="Region-Selection"></span>
You can select a region from the drop-down menu located on the left side of the top navigation bar in the [https://portal.bw-cloud.org/ Dashboard]. The currently active region is marked with a checkmark. Simply click on a different region in the list to switch to it.[[File:Region selection.png|center|thumb|722x722px]]
 
You can select a region from the drop-down menu located on the left side of the top navigation bar in the [https://portal.bw-cloud.org/ Dashboard]. The currently active region is marked with a checkmark. Simply click on a different region in the list to switch to it.
[[File:Region selection.png|center|thumb|722x722px]]

Revision as of 13:47, 13 January 2026

In a Nutshell
  • Access to bwCloud-OS requires an active account from a bwIDM-participating institution.
  • Your account must include a valid entitlement, assigned by your home institution. This is usually automatic. If it is missing (see here), contact your institution’s IT support. The bwCloud-OS team cannot assign entitlements.
  • Log in once to the Dashboard to activate your profile. Setup is automated via bwIDM.
  • After login, select your region as described here to begin using bwCloud-OS.

Automated resource provisioning

During the registration on bwIDM for the bwCloud-OS service, the following steps are streamedlined:

  1. A user registers himself/ herself.
  2. bwIDM requests the creation of a user account by the bwCloud-OS and forwards a set of user data.
  3. The bwCloud-OS parses the user data, including given entitlements.
  4. Based on these data, a user account and a start project is created. The quota flavor given in the entitlement defines the project quota. If more than one quota eligibilities are given, a random one is chosen.The eligibility can later on be changed.

FAQ

What is "bwIDM" and why does it know me?

Every member of a higher education institution in Baden-Württemberg (university, college, PH, HAW, etc.) has a personal account for accessing the IT services provided by their institution. If the institution participates in the federated identity management system bwIDM, its members can also apply for additional IT services offered by other participating institutions.

To allow external IT services to identify users, certain personal data is transmitted via bwIDM to these services during registration and use of the service. Federated identity management ensures, through a model of mutual trust, that the external service can verify the user’s affiliation with their institution — confirming that the account is valid and the user is officially recognized. Within the bwIDM Federation, participating institutions have agreed on a minimum set of personal data that is transmitted to external IT services. This includes standard attributes such as eduPersonPrincipalName, mail, givenName or eduPersonEntitlement.

Which entitlements are required to use bwCloud-OS?

To access and use bwCloud-OS, you need a valid bwCloud(-OS) entitlement. A detailed overview of current regulations can be found on the page Entitlements in bwCloud-OS.

📌 Note: The bwCloud(-OS) entitlement model is currently being restructured and subject to change.

How can I find out which entitlements my account contains?

To view information about bwIDM services linked to your account, log in to the "RegApp".

For detailed information on the entitlements associated with your account (including those for services not yet registered), navigate to:

Index → Personal Data → Shibboleth

In the Value column, you should see entries such as bwCloud-Basic or bwCloud-Extended. If such an entry containing bwCloud exists, you are entitled to register for and use bwCloud-OS. Which specific entitlement you have is determined by your home institution and cannot be changed by you or the bwCloud-OS team.

What should I do if my account has no bwCloud-OS entitlement assigned?

The assignment of entitlements is exclusively managed by your home institution. The bwCloud-OS team does not have the authority to add or remove entitlements on user accounts.

If your account lacks the necessary entitlement, please contact your institution’s central IT service department or service desk.

What does "region" mean in bwCloud-OS?

In bwCloud-OS, a region refers to one of the four operating sites: Freiburg, Karlsruhe, Mannheim, and Ulm. Each region runs its own infrastructure but is accessible through a shared interface (Dashboard).

Resources such as virtual machines (VMs, instances), networks, and storage are bound to the region in which they are created. For example, an instance launched in the Mannheim region will receive an IP address from Mannheim’s specific IP range(s) — this address cannot be transferred to another region.

You can switch between regions in the Dashboard interface as described here.

What is my "home region"?

In bwCloud-OS, each user is initially assigned a home region during account setup. For users from one of the four operating sites (Freiburg, Karlsruhe, Mannheim, Ulm), this assignment is straightforward. For users from other institutions, the assignment is based on the network topology of BelWue — aiming to route each user to the nearest operating site for optimal connectivity. However, you can apply for a project with resources (also) in other regions.

A table showing the current home region assignments can be found here.

Where do I select the region in the Dashboard?

You can select a region from the drop-down menu located on the left side of the top navigation bar in the Dashboard. The currently active region is marked with a checkmark. Simply click on a different region in the list to switch to it.