Login to Galaxy Using Your Globus Account
This page explains how to use this feature, for admin-specific docs, please refer to this page.
We currently support login to a Galaxy instance using your Globus account, programmatically; and we're working on necessary UI components.
Login Programmatically
You can login to Galaxy using your Globus credentials by directly interacting with Galaxy's
authnz
controller.
To do so, you may take the following steps:
-
Type the following address in your browser, after replacing
[Base URI]
with the URI of your Galaxy instance:[Base URI]/authnz/globus/login
In other words, send an HTTP
GET
request to the aforementioned URI. -
In response, Galaxy returns a JSON object containing
redirect_uri
, which is a URL to Globus's authorization endpoint with all the information required to identifying your Galaxy instance. For instance:{ "redirect_uri": "https://auth.globus.org/v2/oauth2/authorize?nonce= ... &state= ... &redirect_uri=http://localhost:8080/authnz/globus/callback&prompt=consent&response_type=code&client_id= ... &scope=openid+profile+email&access_type=offline", }
Copy this URI and pasted it in your browsers's address bar; or in other words, send a
GET
request to this URL. - You would then see Globus's login page (if you're not already logged in), then login via your preferred method, which then you would be taken to Galaxy and will automatically login.
How to disconnect my Globus account from Galaxy?
When you're logged into Galaxy using your Globus account, visit the following page:
[Base URI]/authnz/globus/disconnect
where [Base URI]
is the URL from which the Galaxy instance you're using is accessible. For instance:
http://localhost:8080/authnz/globus/disconnect
The disconnect process will remove all your Globus account tokens from Galaxy's database, but will keep your Galaxy user account active.