You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.rdoc
+5-1
Original file line number
Diff line number
Diff line change
@@ -54,6 +54,10 @@ portal is configured and ready to use:
54
54
* For 'Authorized Javascript Origins', enter <code>https://(your hostname)/single_cell</code>
55
55
* For 'Authorized redirect URIs', enter <code>https://(your hostname)/single_cell/users/auth/google_oauth2/callback</code>
56
56
* Save the client id
57
+
* <b>Whitelisting your OAuth Audience</b>
58
+
* Once you have exported your OAuth credentials, you will need to have your client id whitelisted to allow it to make
59
+
authenticated requests into the FireCloud API as per {OpenID Connect 1.0}[http://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation]
60
+
* Send an email to <b>[email protected]</b> with your OAuth2 client ID so it can be added to the whitelist
57
61
* <b>GCP Service Account keys</b>: Regardless of where the portal is deployed, it requires a Google Cloud Platform Service Account in order to make authenticated calls into FireCloud and Google Cloud Storage. Therefore, you must export the default service account key. See https://developers.google.com/identity/protocols/OAuth2ServiceAccount for more information about service accounts. To export the credentials:
58
62
* Log into your new GCP project
59
63
* Click the navigation menu in the top left and select 'IAM & Admin ' > 'Service Accounts'
@@ -71,7 +75,7 @@ portal is configured and ready to use:
71
75
* Log in with the admin account, and select 'Admin Configurations' from the profile menu (top righthand corner)
72
76
* At the bottom of the page, in the 'Other Tasks' dropdown, select 'Manage Service Account FireCloud Registration' and click 'Execute Task'
73
77
* Fill out all form fields and submit
74
-
* <b>Creating a FireCloud Project</b>: Before you can create studies, you will need to create a FireCloud project that will own all the workspaces created in the portal. To do this:
78
+
* <b>Creating a FireCloud Project</b>: Once your OAuth audience has been whitelisted, and before you can create studies, you will need to create a FireCloud project that will own all the workspaces created in the portal. To do this:
75
79
* Create a {Google Billing Project}[https://software.broadinstitute.org/firecloud/documentation/article?id=9762].
76
80
* Using the same Google account that owns the billing project, log into the portal and select 'My Billing Projects' from the profile menu.
77
81
* Click 'New Billing Project' at the bottom of the page
0 commit comments