Public PIC Wiki - User contributions [en]

Lost OTP

2026-04-13T08:49:55Z

Msantama: Created page with "<span id="otp-recovery-guide-lost-otp-device"></span> = OTP Recovery Guide (Lost OTP Device) = If you lose access to your OTP device, follow these steps to recover your accou..."

<span id="otp-recovery-guide-lost-otp-device"></span>
= OTP Recovery Guide (Lost OTP Device) =

If you lose access to your OTP device, follow these steps to recover your account and configure a new OTP method.

# On the Keycloak login page, click '''Forgot password / OTP'''.
# Enter your username. You should receive a recovery email in your inbox.
# Open the email and follow the recovery link.
# Scan the new QR code with your authenticator app.
# Enter the generated OTP code and a device name.
#* The device name is mandatory.
# Change your password when prompted.
#* This is required for security reasons.
# Log in again as usual.
#* On the OTP selection page, you will see two devices.
#* Select the device with the name you just entered.
#* The old one will usually appear as '''unnamed''' (if no name was set previously).

<span id="recommended-cleanup"></span>
== Recommended Cleanup ==

After logging in, go to:

https://idp.pic.es/realms/PIC/account/account-security/signing-in

Then delete the previous OTP device. If it had no custom name, it may appear as '''otp'''.

Main Page

2026-04-13T08:49:12Z

Msantama: /* Getting started */

== Getting started ==
* [[PIC description|Introduction to PIC]]
* [[PIC account|Get a PIC account]]
* [[Lost OTP|Reset your OTP]]
* [[PIC_User_Manual | User manual]]
* [[faq| Frequently asked questions]]

== Services ==
=== User interfaces ===
* [[Login machines]]
* [[JupyterHub]]

=== Distributed computing ===
* [[HTCondor]]
* [[Dask]]
* Spark:
** [[Spark on Jupyter|on Jupyter]]
** [[Spark_on_farm|on HTCondor]]

=== Storage ===
* [[Storage]]
* [[Hadoop Distributed File System (HDFS)]]
* [[HDFS Access via VOSpace]]
* [[Transferring data to/from PIC]]

=== Other services ===
* [[Gitlab]]
* [[CosmoHub]]

== Experiments ==

* [[Euclid]]
* [[AGN ICE]]
* [[ICFO]]

PIC account

2026-02-17T12:52:35Z

Msantama:

<span id="pic-quick-user-guide"></span>
= PIC — Quick user guide =

This short guide explains how to register, confirm your account, request access to a group, and what to do after access is granted.

Follow these steps if you are a PIC user and need access to resources managed through the account Experiments page.

<span id="create-your-pic-account"></span>
== 1) Create your PIC account ==

# Open the [https://idp.pic.es/realms/PIC/protocol/openid-connect/auth?client_id=register&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fidp.pic.es%2Frealms%2FPIC%2Faccount%2Fexperiments&prompt=create PIC registration page].
# Fill the registration form with your name, a PIC-acceptable username (we recommend first letter of the name + surname truncated at 8 chars), and your email.
# Choose a password and submit the form.
# You will receive an email with a confirmation link — click the link to activate your account.

Notes:

* If you don’t receive the email, check your spam folder.
* Password rules are enforced; if the site rejects your password, follow the guidance on the form.
* If you have trouble with the registration form or email confirmation, contact the PIC administrators at [mailto:user-support@pic.es user-support@pic.es].

[[File:Registration_form.png|500px|left]]

<div style="clear: both"></div>

<span id="log-in-and-open-account-experiments"></span>
== 2) Log in and open Account → Experiments ==

# Log in to PIC with your new account.
# Go to <code>Account</code> and open the <code>Experiments</code> page (if you used the registration link you should already be there, otherwise [https://idp.pic.es/realms/PIC/account/experiments click here to open it]).

From there, you may find a list of projects you can validate your membership in. If you are a member of any project, just click the <code>Request Access</code> button to start the process.

[[File:Experiments_page.png|500px|left]]

<div style="clear: both"></div>

<span id="request-access-flows"></span>
== 3) Request access flows ==

Depending on the project/experiment you have selected, one of the following flows will be triggered:

<ol style="list-style-type: upper-alpha;">
<li><p>If that project has a configured IDP with us, you will be asked to log in. For example, if your are coming from a university, you may be asked to log in with your university credentials. After successful login, you will be linked to the project and granted access to the corresponding resources.</p></li>
<li><p>If your project does not have a configured Identity Provider (IDP), your access request must come from a sponsor. A sponsor is the person who directed you to register at PIC and request access to a specific project (e.g., a project lead, thesis advisor, or teacher). When you request access, you may be prompted to either select a sponsor from a pre-configured list or manually provide their full name and email address.</p></li></ol>

* If your sponsor is in the pre-configured list, you can select them directly and submit the request.
* If your sponsor is not in the list, you can enter their name and email.

[[File:Sponsor_input.png|500px|left]]

<div style="clear: both"></div>

[[File:Sponsor_modal.png|500px|left]]

<div style="clear: both"></div>

<span id="after-access-is-granted-try-services"></span>
== 4) After access is granted — try services ==

Disclaimer: Rigth after access is granted some services may still be unavailable for a few minutes while background scripts run and permissions are fully applied. If you encounter issues, wait a few minutes and retry before contacting support.

Once the contact or IDP approval is completed and you are a member of the group:

* You should be able to access group-only web UIs and services.
* You may be able to SSH to service UIs or jump hosts the PIC team provides (follow PIC-specific SSH instructions).
* You can open Jupyter (or other service UIs) and run notebooks or jobs according to the permissions granted by your group.

<span id="lost-membership-due-to-inactivity-or-offboarding"></span>
== 5) Lost membership due to inactivity or offboarding ==
[[File:Lost Membership.png|500px|left]]
<div style="clear: both"></div>

For IDP groups we periodically (or on login) verify your membership in the external IDP project.

* If you are no longer a member (inactivity / removal) you will be offboarded and shown a message at login. You can then re-request access via the Experiments page.
* If you encounter issues re-requesting, contact the administrators.

<span id="grace-period-only-for-idps-that-do-not-grant-offline-access"></span>
=== Grace period (only for IDPs that DO NOT grant offline access) ===

Some external IDPs do not allow us to request offline tokens. In that case your group may define a <code>gracePeriodDays</code> value.

What this means for you:

# At the end of each grace period window your membership will be removed automatically and the IDP link will be cleared. You must log back into the external institution to regain membership.
# During the grace period, if your institution grants you new privileges (e.g. access to new data) and you do not see them reflected in PIC, you can force a refresh by UNLINKING and re-linking the IDP account:
#* Go to: Account → Account Security → [https://idp.pic.es/realms/PIC/account/account-security/linked-accounts Linked Accounts]
#* Click <code>Unlink</code> for the external IDP.
#* Confirm (ask the contact if unsure), then link again via the Experiments page or the linking button.
#* After re-linking, new privileges should appear (may take a short delay of a few minutes).

If in doubt before unlinking, ask the group’s contact person. Unlinking does not delete your PIC account but it can make you temporarily lose access to some services.

<span id="troubleshooting-common-issues"></span>
== Troubleshooting & common issues ==

* I didn’t get the confirmation email: check spam, then contact admins.
* The Experiments page shows no groups: ask your admin if your account has correct attributes or if the group exists.
* I requested access but nothing happened: contact the group’s contact person or the admin team; provide the request time and the group name.

– End of guide –

PIC account

2026-02-17T12:45:08Z

Msantama:

<span id="pic-quick-user-guide"></span>
= PIC — Quick user guide =

This short guide explains how to register, confirm your account, request access to a group, and what to do after access is granted.

Follow these steps if you are a PIC user and need access to resources managed through the account Experiments page.

<span id="create-your-pic-account"></span>
== 1) Create your PIC account ==

# Open the PIC registration page https://idp.pic.es/realms/PIC/protocol/openid-connect/auth?client_id=register&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fidp.pic.es%2Frealms%2FPIC%2Faccount%2Fexperiments&prompt=create .
# Fill the registration form with your name, a PIC-acceptable username (we recommend first letter of the name + surname truncated at 8 chars), and your email.
# Choose a password and submit the form.
# You will receive an email with a confirmation link — click the link to activate your account.

Notes:

* If you don’t receive the email, check your spam folder.
* Password rules are enforced; if the site rejects your password, follow the guidance on the form.
* If you have trouble with the registration form or email confirmation, contact the PIC administrators (user-support@pic.es).

[[File:Registration_form.png|500px|left]]

<div style="clear: both"></div>

<span id="log-in-and-open-account-experiments"></span>
== 2) Log in and open Account → Experiments ==

# Log in to PIC with your new account.
# Go to <code>Account</code> and open the <code>Experiments</code> page (if you used the registration link you should already be there, else click https://idp.pic.es/realms/PIC/account/experiments).

From there, you may find a list of projects you can validate your membership in. If you are a member of any project, just click the <code>Request Access</code> button to start the process.

[[File:Experiments_page.png|500px|left]]

<div style="clear: both"></div>

<span id="request-access-flows"></span>
== 3) Request access flows ==

Depending on the project/experiment you have selected, one of the following flows will be triggered:

<ol style="list-style-type: upper-alpha;">
<li><p>If that project has a configured IDP with us, you will be asked to log in. For example, if your are coming from a university, you may be asked to log in with your university credentials. After successful login, you will be linked to the project and granted access to the corresponding resources.</p></li>
<li><p>If your project does not have a configured Identity Provider (IDP), your access request must come from a sponsor. A sponsor is the person who directed you to register at PIC and request access to a specific project (e.g., a project lead, thesis advisor, or teacher). When you request access, you may be prompted to either select a sponsor from a pre-configured list or manually provide their full name and email address.</p></li></ol>

* If your sponsor is in the pre-configured list, you can select them directly and submit the request.
* If your sponsor is not in the list, you can enter their name and email.

[[File:Sponsor_input.png|500px|left]]

<div style="clear: both"></div>

[[File:Sponsor_modal.png|500px|left]]

<div style="clear: both"></div>

<span id="after-access-is-granted-try-services"></span>
== 4) After access is granted — try services ==

Disclaimer: Rigth after access is granted some services may still be unavailable for a few minutes while background scripts run and permissions are fully applied. If you encounter issues, wait a few minutes and retry before contacting support.

Once the contact or IDP approval is completed and you are a member of the group:

* You should be able to access group-only web UIs and services.
* You may be able to SSH to service UIs or jump hosts the PIC team provides (follow PIC-specific SSH instructions).
* You can open Jupyter (or other service UIs) and run notebooks or jobs according to the permissions granted by your group.

<span id="lost-membership-due-to-inactivity-or-offboarding"></span>
== 5) Lost membership due to inactivity or offboarding ==
[[File:Lost Membership.png|500px|left]]
<div style="clear: both"></div>

For IDP groups we periodically (or on login) verify your membership in the external IDP project.

* If you are no longer a member (inactivity / removal) you will be offboarded and shown a message at login. You can then re-request access via the Experiments page.
* If you encounter issues re-requesting, contact the administrators.

<span id="grace-period-only-for-idps-that-do-not-grant-offline-access"></span>
=== Grace period (only for IDPs that DO NOT grant offline access) ===

Some external IDPs do not allow us to request offline tokens. In that case your group may define a <code>gracePeriodDays</code> value.

What this means for you:

# At the end of each grace period window your membership will be removed automatically and the IDP link will be cleared. You must log back into the external institution to regain membership.
# During the grace period, if your institution grants you new privileges (e.g. access to new data) and you do not see them reflected in PIC, you can force a refresh by UNLINKING and re-linking the IDP account:
#* Go to: Account → Account Security → Linked Accounts (Example URL: <code>https://idp.pic.es/realms/PIC/account/account-security/linked-accounts</code>)
#* Click <code>Unlink</code> for the external IDP.
#* Confirm (ask the contact if unsure), then link again via the Experiments page or the linking button.
#* After re-linking, new privileges should appear (may take a short delay of a few minutes).

If in doubt before unlinking, ask the group’s contact person. Unlinking does not delete your PIC account but it can make you temporarily lose access to some services.

<span id="troubleshooting-common-issues"></span>
== Troubleshooting & common issues ==

* I didn’t get the confirmation email: check spam, then contact admins.
* The Experiments page shows no groups: ask your admin if your account has correct attributes or if the group exists.
* I requested access but nothing happened: contact the group’s contact person or the admin team; provide the request time and the group name.

– End of guide –

File:Registration form.png

2026-02-17T12:34:04Z

Msantama: A registration form example

== Summary ==
A registration form example

File:Experiments page.png

2026-02-17T12:33:27Z

Msantama: The look of the experiments page in the account

== Summary ==
The look of the experiments page in the account

File:Sponsor input.png

2026-02-17T12:32:43Z

Msantama: The sponsor input field from the account

== Summary ==
The sponsor input field from the account

File:Sponsor modal.png

2026-02-17T12:32:06Z

Msantama: The sponsor modal of the account

== Summary ==
The sponsor modal of the account

PIC account

2026-02-17T12:28:33Z

Msantama:

<span id="pic-quick-user-guide"></span>
= PIC — Quick user guide =

This short guide explains how to register, confirm your account, request access to a group, and what to do after access is granted.

Follow these steps if you are a PIC user and need access to resources managed through the account Experiments page.

<span id="create-your-pic-account"></span>
== 1) Create your PIC account ==

# Open the PIC registration page https://idp.pic.es/realms/PIC/protocol/openid-connect/auth?client_id=register&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fidp.pic.es%2Frealms%2FPIC%2Faccount%2Fexperiments&prompt=create .
# Fill the registration form with your name, a PIC-acceptable username (we recommend first letter of the name + surname truncated at 8 chars), and your email.
# Choose a password and submit the form.
# You will receive an email with a confirmation link — click the link to activate your account.

Notes:

* If you don’t receive the email, check your spam folder.
* Password rules are enforced; if the site rejects your password, follow the guidance on the form.
* If you have trouble with the registration form or email confirmation, contact the PIC administrators (user-support@pic.es).

<span id="log-in-and-open-account-experiments"></span>
== 2) Log in and open Account → Experiments ==

# Log in to PIC with your new account.
# Go to <code>Account</code> and open the <code>Experiments</code> page (if you used the registration link you should already be there, else click https://idp.pic.es/realms/PIC/account/experiments).

From there, you may find a list of projects you can validate your membership in. If you are a member of any project, just click the <code>Request Access</code> button to start the process.

<span id="request-access-flows"></span>
== 3) Request access flows ==

Depending on the project/experiment you have selected, one of the following flows will be triggered:

<ol style="list-style-type: upper-alpha;">
<li><p>If that project has a configured IDP with us, you will be asked to log in. For example, if your are coming from a university, you may be asked to log in with your university credentials. After successful login, you will be linked to the project and granted access to the corresponding resources.</p></li>
<li><p>If your project does not have a configured Identity Provider (IDP), your access request must come from a sponsor. A sponsor is the person who directed you to register at PIC and request access to a specific project (e.g., a project lead, thesis advisor, or teacher). When you request access, you may be prompted to either select a sponsor from a pre-configured list or manually provide their full name and email address.</p></li></ol>

* If your sponsor is in the pre-configured list, you can select them directly and submit the request.
* If your sponsor is not in the list, you can enter their name and email.

<span id="after-access-is-granted-try-services"></span>
== 4) After access is granted — try services ==

Disclaimer: Rigth after access is granted some services may still be unavailable for a few minutes while background scripts run and permissions are fully applied. If you encounter issues, wait a few minutes and retry before contacting support.

Once the contact or IDP approval is completed and you are a member of the group:

* You should be able to access group-only web UIs and services.
* You may be able to SSH to service UIs or jump hosts the PIC team provides (follow PIC-specific SSH instructions).
* You can open Jupyter (or other service UIs) and run notebooks or jobs according to the permissions granted by your group.

<span id="lost-membership-due-to-inactivity-or-offboarding"></span>
== 5) Lost membership due to inactivity or offboarding ==
[[File:Lost Membership.png|500px|left]]
<div style="clear: both"></div>

For IDP groups we periodically (or on login) verify your membership in the external IDP project.

* If you are no longer a member (inactivity / removal) you will be offboarded and shown a message at login. You can then re-request access via the Experiments page.
* If you encounter issues re-requesting, contact the administrators.

<span id="grace-period-only-for-idps-that-do-not-grant-offline-access"></span>
=== Grace period (only for IDPs that DO NOT grant offline access) ===

Some external IDPs do not allow us to request offline tokens. In that case your group may define a <code>gracePeriodDays</code> value.

What this means for you:

# At the end of each grace period window your membership will be removed automatically and the IDP link will be cleared. You must log back into the external institution to regain membership.
# During the grace period, if your institution grants you new privileges (e.g. access to new data) and you do not see them reflected in PIC, you can force a refresh by UNLINKING and re-linking the IDP account:
#* Go to: Account → Account Security → Linked Accounts (Example URL: <code>https://idp.pic.es/realms/PIC/account/account-security/linked-accounts</code>)
#* Click <code>Unlink</code> for the external IDP.
#* Confirm (ask the contact if unsure), then link again via the Experiments page or the linking button.
#* After re-linking, new privileges should appear (may take a short delay of a few minutes).

If in doubt before unlinking, ask the group’s contact person. Unlinking does not delete your PIC account but it can make you temporarily lose access to some services.

<span id="troubleshooting-common-issues"></span>
== Troubleshooting & common issues ==

* I didn’t get the confirmation email: check spam, then contact admins.
* The Experiments page shows no groups: ask your admin if your account has correct attributes or if the group exists.
* I requested access but nothing happened: contact the group’s contact person or the admin team; provide the request time and the group name.

– End of guide –

PIC account

2025-11-14T12:12:01Z

Msantama:

<span id="pic-quick-user-guide"></span>
= PIC — Quick user guide =

This short guide explains how to register, confirm your account, request access to a group, and what to do after access is granted.

Follow these steps if you are a PIC user and need access to resources managed through the account Experiments page.

<span id="create-your-pic-account"></span>
== 1) Create your PIC account ==

# Open the PIC registration page (the site registration link provided by PIC).
# Fill the registration form with your name, a PIC-acceptable username (we recommend first letter of the name + surname truncated at 8 chars), and your email.
# Choose a password and submit the form.
# You will receive an email with a confirmation link — click the link to activate your account.

Notes:

* If you don’t receive the email, check your spam folder and then contact the administrators.
* Password rules are enforced by the realm; if the site rejects your password, follow the guidance on the form.

<span id="log-in-and-open-account-experiments"></span>
== 2) Log in and open Account → Experiments ==

# Log in to PIC with your new account.
# Go to <code>Account</code> and open the <code>Experiments</code> page (if you used the registration link you should already be there, else navigate to it).

What you can do here:

* Link external IDPs (if offered) for automatic group membership.
* Request access to groups that are managed manually (non-IDP groups).

<span id="request-access-to-a-group-manual-approval-flow"></span>
== 3) Request access to a group (manual approval flow) ==

# On the Experiments page, find the group you need and click <code>Request Access</code>.
# Either:
#* Select a configured sponsor for the group (if available), or
#* Enter sponsor name and email in the provided fields.
# Submit the request.

What happens next:

* If the group is backed by an external IDP, you may be asked to log in to that IDP (e.g., Google) to complete linking.
* If the group uses manual approval, a signed approval email will be sent to the group’s contact person(s) or the chosen sponsor.
* Until the request is approved, you can only use your account and public parts of services. Please do not send multiple requests for the same group while waiting for approval.

<span id="after-access-is-granted-try-services"></span>
== 4) After access is granted — try services ==

Once the contact or IDP approval is completed and you are a member of the group:

* You should be able to access group-only web UIs and services.
* You may be able to SSH to service UIs or jump hosts the PIC team provides (follow PIC-specific SSH instructions).
* You can open Jupyter (or other service UIs) and run notebooks or jobs according to the permissions granted by your group.

If a resource still seems unavailable after membership is granted, wait a few minutes (background scripts may run) and retry. If the problem persists, contact the administrators with:

* Your username
* The group name
* A short description of the problem

<span id="lost-membership-due-to-inactivity-or-offboarding"></span>
== 5) Lost membership due to inactivity or offboarding ==

For IDP groups we periodically (or on login) verify your membership in the external IDP project.

* If you are no longer a member (inactivity / removal) you will be offboarded and shown a message at login. You can then re-request access via the Experiments page.
* If you encounter issues re-requesting, contact the administrators.

<span id="grace-period-only-for-idps-that-do-not-grant-offline-access"></span>
=== Grace period (only for IDPs that DO NOT grant offline access) ===

Some external IDPs do not allow us to request offline tokens. In that case your group may define a <code>gracePeriodDays</code> value.

What this means for you:

# At the end of each grace period window your membership will be removed automatically and the IDP link will be cleared. You must log back into the external IDP (and if needed re-link or re-request access) to regain membership.
# During the grace period, if your institution grants you new privileges (e.g. access to new data) and you do not see them reflected in PIC, you can force a refresh by UNLINKING and re-linking the IDP account:
#* Go to: Account → Account Security → Linked Accounts (Example URL: <code>https://idp-test.pic.es/realms/PIC/account/account-security/linked-accounts</code>)
#* Click <code>Unlink</code> for the external IDP.
#* Confirm (ask the contact if unsure), then link again via the Experiments page or the linking button.
#* After re-linking, new privileges should appear (may take a short delay while scripts run).

If in doubt before unlinking, ask the group’s contact person. Unlinking does not delete your PIC account; it only removes the connection to that external project until you link again.

[[File:Lost Membership.png|500px|left]]

<div style="clear: both"></div>

<span id="troubleshooting-common-issues"></span>

<span id="troubleshooting-common-issues"></span>
== Troubleshooting & common issues ==

* I didn’t get the confirmation email: check spam, then contact admins.
* The Experiments page shows no groups: ask your admin if your account has correct attributes or if the group exists.
* I requested access but nothing happened: contact the group’s contact person or the admin team; provide the request time and the group name.

– End of guide –

PIC account

2025-11-05T14:53:59Z

Msantama: /* 1) Create your PIC account */

PIC account

2025-11-05T14:51:31Z

Msantama: /* 1) Create your PIC account */

PIC account

2025-11-05T11:02:03Z

Msantama:

PIC account

2025-11-05T10:57:52Z

Msantama: /* 5) Lost membership due to inactivity or offboarding */

PIC account

2025-11-05T10:57:33Z

Msantama: /* 5) Lost membership due to inactivity or offboarding */

PIC account

2025-11-05T10:57:18Z

Msantama: /* 5) Lost membership due to inactivity or offboarding */

PIC account

2025-11-05T10:55:12Z

Msantama: /* 5) Lost membership due to inactivity or offboarding */

File:Lost Membership.png

2025-11-05T10:53:53Z

Msantama:

PIC account

2025-11-05T09:35:27Z

Msantama: /* 3) Request access to a group (manual approval flow) */

PIC account

2025-11-05T09:20:01Z

Msantama: /* 1) Create your PIC account */

PIC account

2025-11-05T09:19:22Z

Msantama: /* 1) Create your PIC account */

PIC account

2025-11-04T16:33:54Z

Msantama: