Skip to content

Authentication

All FLAME services are accessed by authenticating with Drexel Connect. You log in with your regular Drexel credentials; there is no separate FLAME account or password to manage.

What to expect when you log in

The first time you access any FLAME service (e.g. JupyterHub), you will:

  1. Be redirected to a Globus Auth login page
  2. Select Drexel University as your institution
  3. Be redirected to the standard Drexel Connect login page
  4. Sign in with your Drexel username and password
  5. On your first login, approve a consent screen allowing FLAME to verify your identity
  6. Be redirected back to the FLAME service, now logged in

After the first time, logins are faster. Your browser remembers your session, and you typically only need to re-authenticate if your session has expired, or you're using a different computer.

Command-line authentication

If you use FLAME from the command line via kubectl, authentication uses the same Globus Auth / Drexel Connect workflow, via a tool called Pinniped, which automatically opens a browser window for you to log in with when you type kubectl on the command line. See CLI access for setup instructions and more details.

How it works

Behind the scenes, FLAME uses Globus Auth, a federated authentication service widely used in research computing.

You don't need a separate Globus account

Globus Auth simply delegates to Drexel's identity system. When prompted, choose Drexel University as your institution and sign in as you normally would.

For more details on how Globus Auth works, see the Globus Auth documentation.