Sign In with Federated Identity

Federated login enables users to use a single set of credentials to log into many different services. For example, federated login allows you to use your university or other institutional credentials to log into Chameleon–there is no need to create a new account. In addition, since federated login is supported by many testbeds and services across scientific infrastructures you will be able to sign in once and use multiple services.

Chameleon uses Globus Auth, a popular authentication service, to implement federated login and federates with entities supported by Globus. We strongly recommend using federated login as it’s the simplest and most convenient way to access Chameleon. Users can sign in using their existing institutional account if their institution is an InCommon member, use their Google account, or create a Globus ID tied to an email and password that they provide.

Logging In

To log in to the Chameleon user portal, where you can manage your projects, user profile, and submit Help Desk tickets, use the “Log in” button.

Login button for the Chameleon user portal

To log in to any of the testbed sites (CHI@TACC, CHI@UC, CHI@NCAR, CHI@Edge, KVM@TACC) or the Jupyter environment, just click their item in the “Experiment” dropdown on chameleoncloud.org. The login process is triggered automatically.

Warning

You must be part of a project with an active allocation to use the CHI sites! Refer to our project management guide for details on creating a project or joining an existing one.

Tip

You can bookmark the URLs to the testbed sites and Jupyter environment if you want to access them directly in the future.

Links for accessing testbed sites and the Jupyter interface

You will be taken to a Single Sign On (SSO) page with several authentication options.

Authentication options

  • Sign in via federated identity ⭐ RECOMMENDED: This is the simplest way to access Chameleon! Use your existing institution, research lab, or university credentials to log in. This requires your host institution to participate in the InCommon federation. Most major universities and research institutions are already members.

  • Google: Sign in with any Google account if your institution isn’t part of InCommon or if you prefer using your Google credentials.

  • ORCiD: Sign in with a valid ORCiD account for research credential integration.

Warning

You may not find your institution on Globus. If so, you can still create an account with another identity, such as Google or ORCiD. However, we encourage users to sign up using their institution, as it helps the Chameleon operators verify user identity, which is an essential step to getting Principal Investigator status on the testbed.

Note

Chameleon has fully migrated to federated identity authentication. Legacy Chameleon username/password accounts are no longer supported.

Single Sign On (SSO) portal login

The Single Sign On (SSO) portal login page.

Terms and Conditions

When creating an account, you will be asked to review and consent to the Acceptable Use Policy, which governs all use of Chameleon resources and applies to every project on the testbed.

As part of these terms, among others, you are requested to acknowledge Chameleon in publications produced using the testbed. See our FAQ for information on how to cite Chameleon and the suggested acknowledgement text. The FAQ also covers other common policy questions about allocation charges, usage best practices, and more.

Account linking

Chameleon accounts are linked to a federated identity provider, Globus. If you are no longer wish to/are able to log in via your original account source (e.g. you move institutions), you can re-link your Chameleon account assuming you have access to same email.

Note

Previously Chameleon also supported federated identity via TACC, but this is no longer supported after January 2026. If you previously were using TACC to login to Chameleon, we recommend following the steps below to link your account to Globus.

  1. Log out of the Chameleon site via the menu on the top right of the web page on whatever platform you are using.

  2. Log out of Chameleon’s authentication service.

  3. Sign into Globus with the same primary email address as your Chameleon account. If your institution is not supported by Globus login, we recommend creating a Globus ID or ORCID account.

  4. Return to the Chameleon website from step 1, and click “Log in” and then “Sign in via federated login”.

  5. If an existing Chameleon account was found with the same email address, you will see a message saying “You need to verify your email address to link your account with Globus Auth.” Check your email inbox for a verification link. Once you click this link, your Chameleon account will now be linked to the Globus account from step 3, and you should use this login method when using Chameleon in the future.

If you don’t see this message, then your Globus account is using an email address that Chameleon doesn’t have registered. Please contact the Help Desk for further assistance regarding this or any other issue with the account linking process.

Troubleshooting Login Issues

If you experience difficulty logging in, try these solutions:

Common Authentication Issues:

  • Institutional credentials not working: Ensure your institutional credentials are up-to-date and correctly linked to your Chameleon account

  • Browser issues: Clear your browser cache and cookies, then try logging in again

  • Password reset problems: Use the password reset links provided in the portal

Getting Help:

For persistent login issues, contact our Help Desk with details about:

  • Which authentication method you’re trying to use

  • Any error messages you’re seeing

  • Your institutional affiliation (if using federated login)