Page History

...

Phase 3:  Launchpad Authentication Only
When we transition to Phase 3, the MMT will stop offering users the ability to log in using their Earthdata Login credentials, and the CMR REST APIs will stop accepting Earthdata Login tokens for ingest requests.  All users must be fully compliant with the Launchpad Authentication process at this time, or you will not be able to ingest, update, or delete metadata using the CMR REST API or access the MMT.

For

...

MMT Users: NAMS Requests and Linking Accounts

To authenticate to MMT using Launchpad credentials, each user will first need to submit a CMR NAMS request for be permitted to ingest via the CMR API. An to CMR, then a MMT NAMS request is also required for users who the GUI to publish metadata and manage CMR holdingsto be permitted to ingest via MMT. 

Once the NAMS requests are approved and your account has been provisioned, each user will need to link their Earthdata Login account to their Launchpad account.

...

Step 3:  Link your MMT account with your Launchpad credentials

Once your CMR and MMT NAMS request requests has been approved and your account has been provisioned, your Launchpad credentials can be used to access the MMT by selecting the "Login with Launchpad" button on the MMT home page:

...

1. Create the token service Service Account for your provider:
   1. Go to idmax.nasa.gov and submit a request for “AGCY0031 Active Directory Service Account”
   2. Set the Asset Expiration Date as far in the future as allowed. IDMax will likely only allow you to request an expiration date one year into the future.
   3. Click +Add Service account.  Here, you'll need to set up a name for your service account according to the specified naming convention.  Your service account name must be "sv" followed by the two-letter code for your center ("gs" for GSFC, for example), followed by any string of numbers and letters you'd like.  If you enter at least five characters into the Search Service Accounts field, you can see what account names are already in use.  Just select any name that is not already being used.
   4. In the Business Justification field, enter the name of the "provider" you are representing and indicate that "this request is for Launchpad Authentication".
2. When your AGCY0031 Active Directory Service Account NAMS request has been fully provisioned, call NASA Enterprise Service Desk at 1-877-677-2123 (Option 2) and request to have the service account activated.  You will need to verify your identity and provide them with the name of the service account to be activated.  You will be given a temporary password for the service account.
3. Obtain a PKI Certificate, using the steps on the linked wiki page.  Note that you must have your Service Account created and activated before you can request the PKI Certificate.
4. Request Authorization to Authenticate with Launchpad:
   1. Go to https://idmax.nasa.gov and on the top menu under Credentials, choose “Manage Application Service Accounts”
   2. Choose Manage NCAD Service Accounts
   3. Select the account you want and click the “Request Role Access” for it
   4. Search for “Launchpad Token Service”
   5. Submit for the SiteMinder Token Service role

...