Getting Started for ICSC users

The National Research Centre for High Performance Computing, Big Data and Quantum Computing (ICSC) is one of the five National Centres established by the National Recovery and Resilience Plan (PNRR), covering designated strategic sectors for the development of the Italian country.

INFN-DataCloud is tightly linked to it being in total synergy and complementarity with ICSC's Spoke 0.

This guide describes the procedure to access INFN computing resources granted by ICSC to their users.

If you already possess an INFN-AAI account, i.e. you are or have been in the past an INFN employee or research associated, please skip to the final section Obtain an account for ICSC.

Obtain an INFN-AAI account

To access the IT resources of INFN, included those used by ICSC projects, you need to have a certified (LoA2) INFN-AAI identity. If you already have SPID credentials or a CIE (Italian Electronic Identity Card), you can use them to register a new certified (LoA2) INFN-AAI identity without any further verification. Otherwise you will need to first register a un-verified (LoA1) INFN-AAI identity and then proceed with the online verification process with a member of the INFN Cloud user support team. This process will require the use of a webcam and a valid ID document. We strongly recommend to use the SPID or CIE credentials if you have them.

The official guide, explaining how to create the INFN-AAI account, either LoA1 or LoA2, is available in the INFN Wiki here: https://wiki.infn.it/cn/ccr/aai/doc/rid/istruzioni/userportal/user_loa-eng.

We will report here a summary of such guide but we recommend you to check the above link for any update or change in the process.

Registering using SPID or CIE

To register a new certified (LoA2) INFN-AAI identity using SPID or CIE credentials, follow the next steps.

1. Connect to the INFN user portal at https://userportal.app.infn.it/
2. The INFN identity check page will open. You can switch the language by clicking on the top right corner the desired one (IT or EN). Click either "Entra con SPiD" or "Entra con CIE" button, depending on the credentials you have

1. You will be redirected to the SPID or CIE identity provider page, where you will be asked to enter your credentials. Please follow the instructions of your identity provider to complete the login process
2. After the login process, you will see your profile page on the INFN user portal. If the page is in Italian and you need to change it to English, you can switch the language by clicking the "ita" button in the top right corner of the page.

1. Click on "Enabling requests" ("Abilitazioni", in italian) on the left menu
2. In this page you will see all your request. The first switch "Verify Identity" should be already active. Now click on the "IT resources" switch to turn it on and the press the "Next step" button.

1. In the next page, fill in all the required data, read and accept the information note on the processing of personal data at INFN. Then click on the "Next step" button.

1. Next you have to choose the INFN site and the contact person that will approve your request to access INFN IT resources. For ICSC projects you have to chose from the drop-down menu either "CNAF" or "Laboratori Nazionali del Sud" as site. Then, as contact name you have to choose Carmelo Pellegrino, if you chose CNAF as site, or Emidio Giorgio, if you chose Laboratori Nazionali del Sud. Finally, click on the "Next step" button to proceed.

1. Read and accept the disciplinary regulation for the use of INFN IT resources and then click on the "Next step" button and submit your request.
2. You will now have to wait for the contact person to approve your request.

Registering without SPID or CIE

As already mentioned above we strongly recommend to use the SPID or CIE credentials if you have them. This procedure should be left only to those that do not have SPID or CIE credentials.

You have to first register a new un-verified (LoA1) INFN-AAI identity.

1. Connect to the INFN user portal at https://userportal.app.infn.it/
2. The INFN identity check page will open. You can switch the language by clicking on the top right corner the desired one (IT or EN). Click on "Register" button.

1. Fill in all the required data and click on the "Register" button. Note that the "Italian tax code" field is mandatory only for Italian citizens

1. You will see a confirmation message that your request has been received and an email has been sent to the address you just provided, with a link to proceed with the verification process.

1. Please open your inbox (check the spam folder if the email is not there) and click on the link in the email.

1. You will now see a new confirmation message but this time it will say that your un-verified LoA1 account is active.

1. Also an email will be sent to you with the confirmation that your account is now active.

Once you have your un-verified (LoA1) INFN-AAI identity you can proceed with the request of identity verification and access to IT resources.

1. Connect to the INFN user portal at https://userportal.app.infn.it/ and login with the email and password you used to register the unverified identity.

1. Click on "Enabling requests" ("Abilitazioni", in Italian) on the left menu

1. In this page you will see all your request. Click both on the "Verify Identity" and "IT resources" switches to turn them on and the press the "Next step" button.
2. In this new page, fill in all the required data, read and accept the information note on the processing of personal data at INFN. Then click on the "Next step" button.

1. Now you have to choose the INFN site where you want to verify your identity, we suggest you to choose the nearest site to your location. If you don't know which site to choose or you don't have a INFN site near you, you can select "CNAF" as site. You can also leave a message for the verification office, which may speed up the process. Click on the "Next step" button to proceed.

1. Next you have to choose the INFN site and the contact person that will approve your request to access INFN IT resources. For ICSC projects you have to chose from the drop-down menu either "CNAF" or "Laboratori Nazionali del Sud" as site. Then, as contact name you have to choose Carmelo Pellegrino, if you chose CNAF as site, or Emidio Giorgio, if you chose Laboratori Nazionali del Sud. Finally, click on the "Next step" button to proceed.

1. Read and accept the disciplinary regulation for the use of INFN IT resources and then click on the "Next step" button and submit your request.
2. You will now have to wait for both the verification office to get back to you to schedule the in-person verification and for the contact person to approve your request to use IT resources.

Obtain an account for ICSC

Finally, to access the INFN-DataCloud computing resources, you will need to also request an INFN Cloud account.

• Point your browser to https://iam-icsc.cloud.infn.it and click on the Sign in with "INFN CCR-AAI" button (do not click the green "apply for an account" button)

• Use the INFN-AAI account created as explained above to login
• A request form will be auto-completed with your information as registered in INFN AAI. Please use the notes field to explain in a few words what are the reasons of your request and to which research group you belong.

• After compiling and sending the registration form, a verification e-mail is send to your e-mail address.

• You will be contacted by the the INFN DataCloud Support team in case more details regarding your registration are needed.
• After the successful verification of the requirements you will be notified about the approval of your request and more information will be provided regarding the conditions of use of the INFN DataCloud resources and solutions.

Statement about training

In compliance with the INFN-Cloud Policies and Procedures, you are requested to comply with proper training for the needed access level.

Specifically, people operating as end users are requested to be trained for basic security practices, while system administrators are requested to receive more formal and deep security training.

INFN research associates and employees do already comply with the need of a "end user" access level when they have completed the "INFN Computer Security Course" and can follow the instructions in How To: Request the "nomination to be system administrator" if higher privileges are required.

If you are not an INFN employee, you can state your training level by filling the linked document that must be signed by your employer. In particular, admin privileges will be assigned to you only if the module has been signed by your employes and the box near to Amministratore di sistema is checked.

You have to send a signed PDF version of the document by sending an email to cloud-support@infn.it.