Register a Web App for ACCESS Auth

ACCESS uses CILogon COmanage for OpenID Connect (OIDC) web application registration and management. If you want to manage ACCESS OIDC Clients, please open a ticket and select "I have another question". In your ticket submission, enter the following information:

Summary: Request for ACCESS OIDC Client Management

ACCESS User Support Issue: User Support Question

Description: Please add <Your Name> <your_email@university.edu> as an OIDC client manager to https://registry.access-ci.org/ . I am associated with ACCESS in <pick one of the items below>.

• RAMPS (Track 1)
• MATCH (Track 2)
• CONECT (Track 3)
• MMS (Track 4)
• TTS (Track 5)
• OpenCI (ACO)
• Service Provider <name your resource>

You will receive an email with a link to register for CILogon COmanage. During the enrollment flow, we suggest you authenticate with your institutional/university identity provider (IdP) rather than the ACCESS CI IdP.

After you have registered with CILogon COmanage, see COmanage OIDC Clients for information on registering and managing OIDC clients.

When registering your client, we recommend selecting “Use a Named Configuration” then choosing “ACCESS OIDC client configuration v1”. This configuration causes the ACCESS ID with @access-ci.org to be returned as the OIDC sub claim in the id_token. To use this configuration, be sure to configure your client to request the following scopes: openid, email, profile, org.cilogon.userinfo

To update your client registration later, visit https://registry.access-ci.org/ and log in using the institutional/university identity provider (IdP) that you previously used for enrollment. Select “OIDC Clients” from the left menu, then click the “Edit” button next to the client ID of the client configuration you wish to change. If you do not see the “OIDC Clients” menu item, please open a ticket.