# Failed RSP Login via CILogon

**URL:** <https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028>\
**Category:** Support\
**Tags:** dp0\
**Created:** [October 27, 2023, 3:05am UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028 "2023-10-27T03:05:01Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![cbottrell](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/cbottrell/32/2689_2.png) [@cbottrell](https://www.rubin.community/u/cbottrell)\
**Post date:** [October 27, 2023, 3:05am UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/1 "2023-10-27T03:05:01Z")

</div>

I followed the steps 1-4 from the account set-up instructions here:

> **[Getting an account on the RSP](https://rsp.lsst.io/guides/getting-started/get-an-account.html)**
>
> Before getting started: Understand whether you have Rubin data rights.- Rubin data rights are required in order to hold an account in the Rubin Science Platform., All scientists and students who ar...

On step 5, I get to the “Self Signup with Approval” page with a botton to “Start”. After pressing this button, I get the following error message:

`The identifier "http://cilogon.org/serverE/users/XXXXXX" is not registered. If your request for enrollment is still being processed, you will not be able to login until it is approved. Please contact an administrator for assistance.`

I believe that my request for enrollment was already approved. I know that I am on the data rights holder list as a JA. Am I being dense or is this a bug?

---

<div class="post-metadata">

**Author:** ![ameisner](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/ameisner/32/2392_2.png) [@ameisner](https://www.rubin.community/u/ameisner)\
**Post date:** [October 27, 2023, 6:45am UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/2 "2023-10-27T06:45:44Z")

</div>

Hi Connor,

Thanks for this message. It looks to me like this is an open issue that has been reported as of a few days ago:

> <https://github.com/rubin-dp0/Support/issues/58>
>
> \*\*Describe the bug\*\*
> 
> My attempts to create a login at https://data.lsst.cloud… failed
> at the self-signup stage from two different identity providers.
> 
> \*\*To Reproduce\*\*
> 
> \* 1.1 https://data.lsst.cloud/  
> \* 1.2 click on "Log in" 
> \* 1.3 allow access by:
> \* script: code.jquery.com
> \* script: cdns.jdelivr.net
> \* script: HHHHHHHHHHHH.statuspage.io (where HHHHHHHHHHHH is a 12-character alphanumeric string)
> \* frame: HHHHHHHHHHHH.statuspage.io (same string)
> \* \<nowiki\>2.+3.\</nowiki\> and three select Nicolaus Copernicus University (NCU) and login using our centralised login server
> \* the first time I did this, earlier today, I agreed to send the listed pieces of info to CILogon. On repeating the step now, I have not been asked about whether I agree to send the info (since the NCU server login.umk.pl presumably has stored my earlier agreement - the first time around, I clicked a box saying that I don't need to confirm every time).
> \* \<nowiki\>4.\</nowiki\> Onboarding flow: Identity provider selection
> \* This is still set at Nicolaus Copernicus University, so I left it unchanged.
> \* \<nowiki\>5.\</nowiki\> Self Signup With Approval
> \* Click on "BEGIN -\>"
> \* 5.1 two info boxes flash up briefly about some things being done
> \* 5.2 There's
> \* a warning popup box \`Identifier (SORID) variable "OIDC\_CLAIM\_sub" not set\` (white text, red background); and
> \* \[icon 'i'\] \`The identifier "http://cilogon.org/serverE/users/XXXXXX" is not registered. If your request for enrollment is still being processed,you will not be able to login until it is approved. Please contact an administrator for assistance.\` (black text, yellow background; XXXXXX is a 6-digit number)
> 
> This sequence of steps is reproducible, except that I clicked the X to remove the \`Identifier ...\` box, and it no longer appears on repeats.
> 
> The value XXXXXX is identical each time.
> 
> 
> \* Repeat 2-5 with ORCID, gets to
> \* 5.2 \`The identifier "http://cilogon.org/serverE/users/YYYYYY" is not registered. If your request for enrollment is still being processed, you will not be able to login until it is approved. Please contact an administrator for assistance.\` where YYYYYY is a different number, about 300 greater than XXXXXX, done something like 10 hours later than when I first tried to register.
> 
> \*\*Expected behaviour\*\*
> 
> I expected to be requested to give my given+family name and an email address, as in step 5 of https://rsp.lsst.io/guides/getting-started/get-an-account.html
> 
> \*\*URL\*\*
> 
> The final URL, at step 5.2, is https://id.lsst.cloud/registry/
> 
> \*\*Desktop (please complete the following information):\*\*
> - Device: desktop computer (two different ones)
> - OS: Debian GNU/Linux Bookworm 12.2
> - Browser: firefox-esr
> - Version: 115.3.0esr-1~deb12u1
> - Plugins for privacy: 
> - uMatrix (see 1.3 above for third-party scripts and a frame that I allowed); 
> - Privacy Badger (doesn't seem to have blocked anything); 
> - uBlock Origin (doesn't seem to have blocked anything)
> 
> \*\*Additional context\*\*
> 
> The variable OIDC\_CLAIM\_sub is described at https://www.cilogon.org/oidc .

Thanks for reporting this.

-Aaron

---

<div class="post-metadata">

**Author:** ![drjenncash](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/drjenncash/32/2081_2.png) [@drjenncash](https://www.rubin.community/u/drjenncash)\
**Post date:** [October 27, 2023, 12:05pm UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/3 "2023-10-27T12:05:11Z")

</div>

Just adding that my student and I have both encountered the same error in the last two days. (Using GitHub as the authenticator since we are at a small school).

Please keep us up to date on a fix if it becomes available.

Jennifer Cash  
Deidre Gilliard

---

<div class="post-metadata">

**Author:** ![MelissaGraham](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/melissagraham/32/2549_2.png) [@MelissaGraham](https://www.rubin.community/u/MelissaGraham)\
**Post date:** [October 27, 2023, 10:10pm UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/4 "2023-10-27T22:10:32Z")

</div>

@drjenncash and @cbottrell , the message is that the authentication provider has now fixed this - please try again and let us know?

---

<div class="post-metadata">

**Author:** ![cbottrell](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/cbottrell/32/2689_2.png) [@cbottrell](https://www.rubin.community/u/cbottrell)\
**Post date:** [October 30, 2023, 5:43am UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/5 "2023-10-30T05:43:42Z")

</div>

Hi All,

I can confirm that the issue appears to be resolved.

Best,  
Connor

---

<div class="post-metadata">

**Author:** ![ameisner](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/ameisner/32/2392_2.png) [@ameisner](https://www.rubin.community/u/ameisner)\
**Post date:** [October 30, 2023, 8:21am UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/6 "2023-10-30T08:21:36Z")

</div>

3 posts were split to a new topic: [503 error when attempting to access RSP Notebook Aspect](https://www.rubin.community/t/503-error-when-attempting-to-access-rsp-notebook-aspect/8031)

---

<div class="post-metadata">

**Author:** ![drjenncash](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/drjenncash/32/2081_2.png) [@drjenncash](https://www.rubin.community/u/drjenncash)\
**Post date:** [October 30, 2023, 8:37pm UTC](https://www.rubin.community/t/failed-rsp-login-via-cilogon/8028/7 "2023-10-30T20:37:37Z")

</div>

The issue seems to be resolved for me. I will check with my student and report if there are any issues for her.
