OpenIDs from CEDA registering as LLNL

[murphysj]

WHO: Sylvia

When you look at the list of system users, the home node for folks with ceda openIDs is listed as PCMDI.

[LucaCinquini]

As a starter, CEDA configured their account creation so that the user is always redirected to the CEDA IdP, which is a custom IdP implementation. As a consequence, user account are never created in an ESGF database at that location.

In such a situation, you would expect that the user is assigned as "home node" the first CoG where they login with their openid. But - it seems that if they use that openid to log first into CEDA, then into CU, two different CoG accounts are created, with different home nodes. This may be due to the fact that URLs of the following:

https://esgf-index1.ceda.ac.uk/share/user/?openid=https://ceda.ac.uk/openid/Luca.Cinquini2

are returning empty documents.... still investigating...

[murphysj]

Guy responsible is on vacation, moving to a later release.

[LucaCinquini]

More testing. Performed the following actions:

o Create an account at CEDA:
username: lucacinquini002
assigned openid: https://ceda.ac.uk/openid/Luca.Cinquini3

o Was able to login at CEDA web portal

o Was able to login at ESGF/CEDA node with openid=https://ceda.ac.uk/openid/Luca.Cinquini3
Had to re-enter all personal information because attributes are not transmitted via openid AX
Home site appears to be:
Home Node ESGF-INDEX1.CEDA.AC.UK
See:
https://esgf-index1.ceda.ac.uk/user/detail/920/

o The I tried the same openid to login into ESGF/JPL. I was sucessfull but I had to enter my information all over again, and eventually the home node for that account showed up as JPL:

https://esgf-node.jpl.nasa.gov/user/detail/319/

o Again I think this is because the CEDA CoG fails to deliver basic user information for registered users:

https://esgf-index1.ceda.ac.uk/share/user/?openid=https://ceda.ac.uk/openid/Luca.Cinquini3