Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migration of unmigrated content due to installation of a new plugin
section
Composition Setup
defaultsHome^deck.properties
 
column
width1%columnwidth18%deck
Panel
borderColor
white
bgColor
white
borderWidth
12px
indent
Table of Contents
5px

 

width300pxid
Background Color
color
E6E6FA
toc
Card
labelSearch Stellar Help

Livesearch
spaceKeySUG2

Card
labelTable of Contents
Wiki Markup

{align:left}
{toc:maxLevel=5|minLevel=3|style=list}
Excerpt Include
SUG2:HomeSUG2:Home
nopaneltrue
Column
width1%

Logging In

People with an MIT Kerberos username, or an MIT X.509 certificate can simply use their normal account to securely authenticate to Stellar.

Default browser settings should not prevent anyone from using MIT Touchstone for authentication. However, there are various optional settings that can affect the usability of Touchstone.

The use of cookies

MIT Touchstone requires the use of browser cookies. If cookies have been disabled in the browser an error will result when attempting to use MIT Touchstone enabled applications. To re-enable cookies within your browser you should consult your browser's documentation.

The site associated with the cookies will depend on which identity provider, or account provider, you are using.

The use of javascript

Although MIT Touchstone assumes Javascript is enabled, and uses it, it is still possible to authenticate if you do not have Javascript enabled. Instead of being automatically redirected back to the application that you are trying to access, you will have to use a button to complete a form post.

Background Color
colorE6E6FA

How to Login

For all users:

From the Stellar homepage or CourseGuide, click the You@Stellar tab or navigate to the class site you are joining and click the LOGIN link at the top of the left navigation bar.

If you have cookies enabled, you are directed to the Please choose your account provider page:

  1. If you are an MIT user, select MIT Kerberos account (or MIT web certificate)
    • The Touchstone@MIT page is displayed.
    • Choose your preferred login method and click the appropriate button.
    • You are redirected back to Stellar.
  2. If you are a non-MIT user, select Touchstone Collaboration Account.  The red Touchstone Collaboration Accounts login page is displayed.
    • If you already have a Touchstone Collaboration Account, enter your user name and password. Complete the login.
    • You are redirected back to Stellar.
Background Color
colorE6E6FA

Troubleshooting Login Problems

If you get an Access Denied message, complete and send the email form so a member of the class faculty can add you to the class/section Participants list. You should then receive a response from the instructor.
Please note: If you leave the Stellar page idle for 1 hour or if it's 6 hours after getting the Touchstone ticket, you will need to re-authenticate.

For MIT users:

If you are on the Participants list and still cannot gain access, consider the following:

  • Do you have an MIT certificate? To use a Stellar class website, you need both an MIT Certificate Authority and a personal certificate.
    All personal certificates at MIT expire on July 31. Go to Certificates at MIT for directions on checking the expiration date of certificates, deleting expired certificates in your browser, and getting a new personal certificate or MIT CA certificate.
  • Try clicking the Login button on the class or section homepage, then click a link in the homepage's navigation bar. If clicking the link takes you to another page, you are logged in.

    Info

    Users with a non-MIT account are prompted to enter a user name and password after clicking the Login button.

  • Try logging in to another certificate-protected site, such as WebSIS. If this works, then the problem is in Stellar. If it does not work, the problem is in the particular computer/browser/certificate combination you are using. Make sure that your computer and browser have only current MIT certificates – delete any old ones.
  • Make sure you are using an IS&T-supported web browser.
  • If all attempts fail, contact the IS&T Service Desk.
Info

The first time a user is added to Stellar,  corresponding user information , e.g., name/office location, from the MIT directory will be copied over to Stellar. Stellar does not check for modifications to the user information in the MIT directory for its current user list. Thus, modifications in the MIT directory will not be reflected in the Stellar user information.  Also, changes made to user information in Stellar will not be reflected in the directory. 

For non-MIT users:

Users without Stellar accounts must obtain a Kerberos account and provide that email address to the Instructor or Admin of the site they wish to access. The Instructor must add you to the membership list of this site.

If you are on the participants list and still experience issues logging in, consider the following:

  • Is the email address you are using to login the same as the one the instructor listed as your email address on the site? Check with the instructor.
  • If this is not the problem, contact the IS&T Service Desk.
Background Color
colorE6E6FA

MIT Certificates

All members of the MIT community automatically have a Stellar account that uses the MIT Kerberos user name, e.g., username@mit.edu, as the Stellar user name. MIT users identify themselves to Stellar through a personal certificate.

To get certificates for the browser and computer you are using, go to the MIT Certificates page. Get an MIT Certificate Authority first, if you do not have one already, then get an MIT Personal Certificate. To get a personal certificate, you must already have the following:

Info

All personal certificates at MIT expire on July 31. Go to Certificates at MIT for directions on checking the expiration date of certificates, deleting expired certificates in your browser, and getting a new personal certificate or MIT CA certificate.

1%
Panel
 
Column
width74%
Panel
borderColorwhite
bgColorwhite
borderWidth12px
Wiki Markup

h2. Logging In
{bgcolor:E6E6FA} h3. Troubleshooting Login Problems {bgcolor}
If you get an Access Denied message, complete and send the email form so a member of the class faculty can add you to the class/section Participants list. You should then receive a response from the instructor.

h5. *For MIT Users:*
If you are on the Participants list and still cannot gain access, consider the following:
* Do you have an MIT certificate? To use a Stellar class website, you need both an MIT Certificate Authority and a personal certificate.
All personal certificates at MIT expire on July 31. Go to [Certificates at MIT|http://web.mit.edu/is/topics/certificates/index.html] for directions on checking the expiration date of certificates, deleting expired certificates in your browser, and getting a new personal certificate or MIT CA certificate.
\\
\\
* Try clicking the Login button on the class or section homepage, then click a link in the homepage's navigation bar. If clicking the link takes you to another page, you are logged in.
{info}Users with a non-MIT account are prompted to enter a user name and password after clicking the Login button.{info}
\\
* Try logging in to another certificate-protected site, such as WebSIS. If this works, then the problem is in Stellar. If it does not work, the problem is in the particular computer/browser/certificate combination you are using. Make sure that your computer and browser have only current MIT certificates---delete any old ones.
\\
\\
* Make sure you are using an [MIT-supported web browser|http://web.mit.edu/ist/topics/browsers/].
\\
\\
* If all attempts fail, contact the [Computing Help Desk|http://web.mit.edu/ist/helpdesk/index.html].
\\

h5. *For non-MIT users*
If you are on the participants list, consider the following:
* Is the e-mail address you are using to login the same as the one the instructor listed as your e-mail address on the site? Check with the instructor.
* If this is not the problem, contact the [Computing Help Desk|http://web.mit.edu/ist/helpdesk/index.html].

{bgcolor:E6E6FA} h3. Stellar Login via MIT Touchstone {bgcolor}
h5. New Login Process: Stellar and Wikis

The login process for Stellar and MIT Wikis will change on August 1, 2009. Authentication for all users (including MIT-community members with personal certificates) will now be managed solely by MIT Touchstone. This means that Stellar and Wikis users will see a different set of login screens when accessing these systems.

Watch the [Stellar Login Video|http://web.mit.edu/stellar-help/logging_in.html]

MIT Touchstone provides a single-sign-on point of entry for users of MIT services obviating the need for separate local accounts across systems and standardizing basic account management procedures for guest users, like resetting forgotten passwords and making name changes.

* *MIT Touchstone is:*
*# A *centralized authentication and login service* for MIT-community users
\\
*# A *centralized authentication and account/profile management service* for users outside of the MIT community
\\

* *Touchstone Accounts are:*
*- Free
*- Self-service
*- Web-based
*- Based on open standards including SAML and Shibboleth
*- Shibboleth Single Sign-On enabled


h5. How this change will affect you:
You are a *MIT user* if you:

* have a +MIT Kerberos account+
* have a +@mit.edu email address+
* have a +MIT personal certificate+

All other users are +Guest users+

Users with a Kerberos account or personal certificate *do not need* to create a Collaboration Account to use Stellar. Touchstone supports both Kerberos and certificates.


h5. New Stellar users

Users without Stellar accounts must provide an email address to the Instructor or Admin of the site they wish to access. The Instructor must add you to the membership list of this site. You will receive an email with instructions on how to create your Collaboration Account.

Users can also [create a Collaboration Account|https://idp.touchstonenetwork.net/cams/CreateAccount.action] first and then provide their email address to the Instructor. So long as the email address is the same as the one you used to create your Collaboration Account, you will have access to Stellar.

Non-MIT users MUST activate their Collaboration Account in order to access their class sites.
These users will appear as a "Provisional User" on the Participant List until they have activated their account AND successfully logged into Stellar.

At this time, using *OpenID* to login is not recognized by most MIT applications. However, if you wish, you may associate your OpenID account with your Collaboration Account. To do this you must create a Collaboration Account first, then update your user profile to associate your OpenID account to your Collaboration Account. Once the association is complete, you can use your OpenID account to login. Please note that MIT Touchstone does not yet support OpenID 2.0.
\\


h5. New Login Steps - All Users

From the [Stellar homepage|http://stellar.mit.edu] or [CourseGuide|http://stellar.mit.edu/courseguide/], click the [You@Stellar tab|http://stellar.mit.edu/atstellar/] or navigate to the class site you are joining and click the LOGIN link at the top of the left navigation bar.

If you have cookies enabled, you are directed to the *Please choose your account provider* page:
# {toggle-cloak:id=1} If you are an MIT user, select MIT Kerberos account (or MIT web certificate)
{cloak:id=1}
!MIT_login.png|border=1px!
{cloak}
#- {toggle-cloak:id=2} The Touchstone@MIT page is displayed.
{cloak:id=2}
!kerberos_login.png|border=1px!
{cloak}
#- Choose your preferred login method and click the appropriate button.
#- You are redirected back to Stellar.
# If you are a non-MIT user, select *Touchstone Collaboration Account. *{_}The red Touchstone Collaboration Accounts login page is displayed._\#\- If you already have a Touchstone Collaboration Account, enter your user name and password. Complete the login.
#- You are redirected back to Stellar.
# {toggle-cloak:id=3} If you *do not* have have a Touchstone Collaboration Account, click *Not Registered?*
{cloak:id=3}
!cams_login.png|border=1px!
{cloak}
#- Complete the form fields - be sure to use the same email address you've used with Stellar before if you want to keep access to your class sites from previous semesters - complete the word verification, check the Terms of Service box and click \*"Create Account."
#- Check your inbox (and spam filer) for a Collaboration Account activation email from touchstone-support@MIT.EDU containing an activation code and link. Click on the link, follow the instructions to activate your account.
#- Go to Step 1 above to access Stellar with your new account information.


h5. Additional Information about MIT Touchstone Accounts

- [MIT Touchstone FAQ|https://wikis.mit.edu/confluence/display/TOUCHSTONE/MIT+Touchstone+FAQ]

{bgcolor:E6E6FA} h3. MIT Certificates {bgcolor}
All members of the MIT community automatically have a Stellar account that uses the MIT Kerberos user name (e.g., username@mit.edu) as the Stellar user name. MIT users identify themselves to Stellar through a personal certificate.
\\
\\
To get certificates for the browser and computer you are using, go to the [MIT Certificates page|http://web.mit.edu/ist/topics/certificates/]. Get an MIT Certificate Authority first, if you do not have one already, then get an MIT Personal Certificate. To get a personal certificate, you must already have the following:
* Kerberos user name ([contact the Accounts Office|http://web.mit.edu/accounts/www/])
* MIT ID card ([contact the Card Office|http://web.mit.edu/mitcard/])
** If you have an MIT ID, but have never used your Kerberos ID, first [register with Athena|http://web.mit.edu/register/] . A day or two later you can get your [MIT certificates|http://web.mit.edu/ist/topics/certificates/]. You need both an MIT Certificate Authority and a personal certificate.
\\
\\

{info}All personal certificates at MIT expire on July 31. Go to [Certificates at MIT|http://web.mit.edu/ist/topics/certificates/] for directions on checking the expiration date of certificates, deleting expired certificates in your browser, and getting a new personal certificate or MIT CA certificate.{info}

Column
width