Connecting to WildIris

Overview

This document describes how to connect to WildIris. This is being developed.

Install and Set up 2 Factor Authentication

WildIris supports two factor login with a number of 2 factor authentication devices. UW ARCC has tested 2 factor authentication with the following:

Google Authenticator Open	Duo Mobile Open
Authy	FreeOTP

Users may set up multiple devices with your ARCC provided two factor code/authentication and instructions for each are below.

Set up Google Authenticator on a Mobile Device

1. On a device that is NOT the device you’re setting up authentication on, click the QR code link in the e-mail provided to you when your WildIris account was created. When opened, this QR code should display in a browser window.

2. On your mobile device, if you have not already installed it, download Google Authenticator either from the AppStore if you’re on an Apple device, or the Google Play Store if you’re on an Android device.

3. Launch the Google Authenticator application.

4. At the top, tap the security tab. Choose the option to get started and sign in with a google account. If you don’t have one, you may need to set one up.

5. If prompted, tap set up authenticator. If you already have authenticator on your phone, click the + button to add an account.

6. When setting up your account you will be prompted to scan a QR code. Scan the code provided to you by UW ARCC with the camera on your mobile device. You may be prompted for access to your camera - say OK.

Set Up FreeOPT App on a Mobile Device

1. On a device that is not your mobile device, click the QR code link in the email sent when your account was created. The QR code will display in a browser.

2. On your mobile device, download the “FreeOTP Authenticator” app by Red Hat from either the Google Play store or the Apple App store.

   1. Note that some Android users may get an alert that this app is optimized for older devices. This is ok.

3. Launch the app.

4. On First launch, you should see:  “No tokens have been added yet. Add a token”

   1. Tap ‘Add a token’.

5. Give FreeOTP access to camera.

6. Scan the QR code in the browser window using the camera on the mobile device.

7. Choose an icon to represent WildIris in the app.

Set up Duo Mobile on a Mobile Device

1. On a device that is not the device you’re going to be authenticating with, click the QR code link provided in the e-mail sent to you when your WildIris account was created. When opened, the QR code should display in a browser window.

2. On your mobile device, if you haven’t already installed it, download the Duo Mobile app from the AppStore if you’re on an Apple Device, or the Google Play Store if you’re on an Android Device.

3. Open the Duo Mobile App. If this is your first time setting it up, you may be prompted to enter your phone number and verify ownership of the device. Follow the process to do so.

4. Once you’re device is set up, if not already prompted to add your account, click the + button to add an account.

5. Choose the option to Use QR code.

6. Grant Duo Mobile access to the camera, and scan the QR code provided to you.

Set up Authy on a Computer

1. On your computer, download Authy from here. Select your operating system and choose the correct version. If you’re not sure, check with someone from UW ARCC.

2. Once downloaded, open the installer and install the app by following the on screen instructions.

3. Enter your e-mail address and phone number (this does not have to be a mobile number but one you have access to) then click Next.

4. Choose how you’d like to receive 2 factor notification. You’ll need to provide that verification in a moment so the option you select should be one you currently have access to.

5. The application will open asking you to set up an account.

6. Scan the QR code using the camera on your computer. If you do not have a camera and require a code, please contact ARCC-help@uwyo.edu for assistance.

First Login Via SSH

1. Using MobaXterm, Putty or your favorite terminal program, ssh to Wildiris:

   1. Terminal: ssh <username>@wildiris.arcc.uwyo.edu

   2. Putty or MobaXterm: enter <username>@wildiris.arcc.uwyo.edu into the hostname/session window.

      1. Note: the first time you connect using Putty, it will popup a security alert about the server’s host key not being cached in the registry. For WildIris, it is fine to accept this.

   3. First login:

      1. Enter your user name and password:

         1. The first factor is the temporary password that was emailed to you.

         2. The second factor is the numerical code provided by your chosen two factor authentication app.
            Note: the code on your device expires in time, BUT WildIris also has a narrow window of time to put that code in, so even if your account is active, your second factor code will be rejected if the WildIris window has closed.

      2. Wait until the 2 factor application gives you a new second factor code.

      3. WildIris will immediately ask for your current password (re-enter the temporary password that was emailed to you).

         1. Enter the new second factor code.

      4. WildIris will now ask you to enter a new password. Note you’ll have to enter it twice to confirm it.

         1. The new password should be 8+ characters long and include upper and lower case letters, and numbers or special characters.

For more information, see SSH Login to HPC

Subsequent Logins:

1. Using MobaXterm, Putty or your favorite terminal program, ssh to Wildiris:

   1. Terminal: ssh <username>@wildiris.arcc.uwyo.edu

   2. Putty or MobaXterm: enter <username>@wildiris.arcc.uwyo.edu into the hostname/session window.

   3. Enter your password, and second factor code from your two factor authentication application when prompted:

      1. The first factor is the password you set in the final step of the First Login process.

      2. The second factor is the numerical code provided by your two factor authentication application.

2. You can also use the WildIris web portal.

   1. Enter your user name.

   2. Enter your password and your two factor authentication second factor code as one word.

      1. For example: mypassword123456

      2. Where “mypassword” is your password (in this example) and 123456 is the second factor code provided by the application.