Last update: November 7, 2022

Service Description 

The National Center for Supercomputing Applications (NCSA) CILogon service is an integrated Identity and Access Management Platform for Science.

CILogon enables researchers to log on to cyberinfrastructure (CI). CILogon provides an integrated open-source identity and access management platform for research collaborations, combining federated identity management (Shibboleth, InCommon) with collaborative organization management (COmanage). Federated identity management enables researchers to use their home organization identities to access research applications, rather than requiring yet another username and password to log on. Collaborative organization management enables research projects to define user groups for authorization to collaboration platforms (e.g., wikis, mailing lists, and domain applications). CILogon implements the AARC Blueprint Architecture and the REFEDS Assurance Framework.

CILogon provides different service levels on an annual subscription basis:

  • Essential Service
  • Full Service

    • OpenID Connect Provider (with client management via COmanage and OAuth API)

    • Shibboleth SAML Service Provider (federated via InCommon, with support for custom configurations)

    • X.509 Certification Authority services

    • COmanage Registry (dedicated instance with custom DNS name, support for custom plug-ins, and Platform Admin access)

    • OpenLDAP Directory

    • SATOSA SAML Proxy

    • pyFF MDQ Server

    • Customized look-and-feel of CILogon.org Login page

    • Federated access to AWS, Azure, Google Cloud, and IBM Cloud

    • SAML Attribute Authority (not registered InCommon)

    • Grouper Access Management

    • JWT Issuer supporting SciTokens, WLCG Tokens, RFC 9068, and GA4GH Passports with custom configurations

    • Provided under a detailed service level agreement

  • Federation Service - CILogon services provided via a regional, national, or international federation

Additional details are found on their website - CILogon Home page

Charging Policy

  • Internal Users

    • Essential Service - $9,513.34 per year per subscriber, charged at $792.78 per month.

    • Full Service - $21,102.57 per year per subscriber, charged at $1,758.55 per month.
    • Internal user is defined as the ultimate source of funds within the University of Illinois System, or whose funds flow through the U of I system through sponsored programs.  These include academic, research, administrative and auxiliary areas which purchase the service to support their work at the system.  Federal grants administered by the universities are considered internal customers.

  • External Users 

    • Essential Service - $15,000 per year per subscriber

    • Full Service - $35,000 per year per subscriber
    • External user is defined as an organization or individual whose ultimate source of funds is outside of the U of I System. External users include students and any members of faculty or staff acting in a personal capacity, and the general public. Affiliated hospitals or other universities are considered external users unless the System has subcontracted with them as part of a grant or contract.

Periodically, the rate is reviewed and recalculated to ensure that customers have updated staffing and application infrastructure.

*subject to update based on periodic review

Billing

Billing will occur on a monthly basis for internal customers. 

External customers will need a Master Agreement in place and will be billed on an annual basis depending on the contract terms.

Contacts

For Facility, Administrative, and Technical Questions, please reach out to James Basney (jbasney@illinois.edu)

For Administrative Questions, please reach out to For Financial and Billing Concerns, please reach out to the NCSA Business Office (faaccount@ncsa.illinois.edu), or Richelle Lu-Rivera (rlu@illinois.edu) 

For Proposal Inclusions, please reach out to the Proposal Development Staff (NCSA-proposals@lists.ncsa.illinois.edu) 

  • No labels