You must first have an NCSA identity before you can request Nightingale access. To generate an identity, use the invite link provided by your coordinator, or have your coordinator request the link from help+hipaa@ncsa.illinois.edu. This process will generate an NCSA account, including an NCSA Kerberos principle and enroll you into NCSA's Duo multi-factor authentication. Once completed, you can manage your identity here: https://identity.ncsa.illinois.edu/. More information about NCSA's Duo can be found here: Duo at NCSA.
Once you have an NCSA identity, email a request for an account to help+hipaa@ncsa.illinois.edu. The request must include your NCSA account (which you've obtained in the previous step above), and a brief justification for Nightingale access. Example justification would be "Need access for the <project name> project to store and process <labeled data>" . This will start the process of Nightingale access authorization and allow your account to be added to the correct system and data access groups.
Once you have been added to the Covered Entity and your account has been added to the correct access group, you can access Nightingale by following these steps:
- Access might be restricted to certain networks, for example UIUC networks or VPNs.
- Please check with the project PI to determine if these restrictions apply.
- ssh to 'ngale-bastion-1.ncsa.illinois.edu'
- Enter your NCSA Kerberos password.
- Enter '1' to send a push to the Duo app on your smartphone for NCSA.
- Approve the request on your phone.
- ssh to 'ngale01' (or your designated NIghtingale interactive host provided by the project PI).