CILogon.org is moving to Amazon Web Services (AWS)

[Terry Fleury]

On Monday, March 21, 2022 at 8am CDT (13:00 UTC), several CILogon.org services will be migrated from NCSA to AWS, including:

• https://cilogon.org/

• https://demo.cilogon.org/

• http://crl.cilogon.org/

The update involves changing DNS to point to new server instances in AWS. DNS TTL (Time To Live) is set to 1 minute, but your local DNS server may take more time to be updated. Database replication is in place to enable migration of users and clients. However, you may need to re-authenticate any active sessions.

The CILogon test servers have already been migrated to AWS: 

• https://test.cilogon.org/

• https://demo-test.cilogon.org/

• http://crl-test.cilogon.org/ 

We would appreciate your assistance in testing before production server are migrated. If you have an OpenID Connect (OIDC) client, you can change your client's OIDC discovery endpoint to https://test.cilogon.org/.well-known/openid-configuration . If you have an OAuth2 client, you can configure the various test endpoints as follows:

• Authorization: https://test.cilogon.org/authorize 

• Token: https://test.cilogon.org/oauth2/token 

• User Info: https://test.cilogon.org/oauth2/userinfo 

• JSON Web Key Sets (JWKS): https://test.cilogon.org/oauth2/certs 

• X.509 Certificate: https://test.cilogon.org/oauth2/getcert 

If you have any questions about this update, please contact he...@cilogon.org .