REVIEW-45: XCI-36 Enable L3 resource logins via XSEDE using login allocations - Design/Security Review

General design and security risk review for a new ability for users to login to campus clusters thru the XSEDE SSO hub using an L3 Resource Login Allocation.

Design doc sections B.1, E.1, E.2, F, and G.1 revised to address reviewer comments and include clarifying design text from XCI-36 participants.

https://software.xsede.org/svn/xci/activities/xci-036/trunk/Deliverables/L3Logins-Design.pdf

https://software.xsede.org/viewvc/xsede/xci/activities/xci-036/trunk/Deliverables/L3Logins-Design.pdf?pathrev=3692

Please focus on these questions:

1. Does the proposed design satisfy the functional user requirements?
2. Are the protocols and interfaces selected appropriate and secure?
3. Are all the relevant components and changes to each component identified?
4. Are the interactions with other XSEDE and non-XSEDE services appropriate and secure?
5. Are relevant XSEDE security policies and best practices followed?
6. Are the services operated in a secure way and are the procedures appropriate to deal with planned and unplanned outages and unplanned incidents?

and the following solution supported scenarios:

1. The user obtains an XSEDE account, requests access to the L3 Resource Login Allocation, is notified when they have been added to the allocation, and is able to login thru the SSO hub to the relevant campus login server
2. A campus IT administrator can request a new L3 Resource Login Allocation and can add and remove user access to that L3 Resource Login Allocation thus controlling user access to the campus login server