How to request a CNAF account

In order to obtain access to CNAF computing resources, you first need to register to INFN-AAI, the INFN-wide authentication system.

How to request an INFN account

If you already have SPID credentials or a CIE (Italian Electronic Identity Card), you can use them to register a new certified (Level of Assurance 2, LoA2) INFN-AAI identity without any further verification. Otherwise you will need to first register a unverified (Level of Assurance 1, LoA1) INFN-AAI identity and then proceed with the online verification process with a member of the INFN Cloud user support team. This process will require the use of a webcam and a valid ID document.

You can find more information on the procedure and the level of assurance https://wiki.infn.it/cn/ccr/aai/doc/rid/istruzioni/userportal/user_loa-eng.

Registering using SPID or CIE

To register a new certified (LoA2) INFN-AAI identity using SPID or CIE credentials, follow the next steps.

• Connect to the INFN user portal at https://userportal.app.infn.it/
• The INFN identity check page will open. You can switch the language by clicking on the top right corner the desired one (IT or EN). Click either "Entra con SPiD" or "Entra con CIE" button, depending on the credentials you have

• You will be redirected to the SPID or CIE identity provider page, where you will be asked to enter your credentials. Please follow the instructions of your identity provider to complete the login process
• After the login process, you will see your profile page on the INFN user portal. If the page is in Italian and you need to change it to English, you can switch the language by clicking the "ita" button in the top right corner of the page.

• Click on "Enabling requests" ("Abilitazioni", in Italian) on the left menu
• In this page you will see all your request. The first switch "Verify Identity" should be already active. Now click on the "IT resources" switch to turn it on and the press the "Next step" button.

1. In the next page, fill in all the required data, read and accept the information note on the processing of personal data at INFN. Then click on the "Next step" button.

1. Next you have to choose the INFN site and the contact person that will approve your request to access INFN IT resources. For ICSC projects you have to chose from the drop-down menu either "CNAF" or "Laboratori Nazionali del Sud" as site. Then, as contact name you have to choose Carmelo Pellegrino, if you chose CNAF as site, or Emidio Giorgio, if you chose Laboratori Nazionali del Sud. Finally, click on the "Next step" button to proceed.

1. Read and accept the disciplinary regulation for the use of INFN IT resources and then click on the "Next step" button and submit your request.
2. You will now have to wait for the contact person to approve your request.

Registering without SPID or CIE

As already mentioned above we strongly recommend to use the SPID or CIE credentials if you have them. This procedure should be left only to those that do not have SPID or CIE credentials.

You have to first register a new un-verified (LoA1) INFN-AAI identity.

1. Connect to the INFN user portal at https://userportal.app.infn.it/
2. The INFN identity check page will open. You can switch the language by clicking on the top right corner the desired one (IT or EN). Click on "Register" button.

1. Fill in all the required data and click on the "Register" button. Note that the "Italian tax code" field is mandatory only for Italian citizens

1. You will see a confirmation message that your request has been received and an email has been sent to the address you just provided, with a link to proceed with the verification process.

1. Please open your inbox (check the spam folder if the email is not there) and click on the link in the email.

1. You will now see a new confirmation message but this time it will say that your unverified LoA1 account is active.

• Also an email will be sent to you with the confirmation that your account is now active.

Once you have your unverified (LoA1) INFN-AAI identity you can proceed with the request of identity verification and access to IT resources.

• Connect to the INFN user portal at https://userportal.app.infn.it/ and login with the email and password you used to register the unverified identity.

• Click on "Enabling requests" ("Abilitazioni", in Italian) on the left menu

1. In this page you will see all your request. Click both on the "Verify Identity" and "IT resources" switches to turn them on and the press the "Next step" button.
2. In this new page, fill in all the required data, read and accept the information note on the processing of personal data at INFN. Then click on the "Next step" button.

1. Now you have to choose the INFN site where you want to verify your identity. Select
2.  "CNAF" as site. You can also leave a message for the verification office, which may speed up the process. Click on the "Next step" button to proceed.

• Next you have to choose the INFN site and the contact person that will approve your request to access INFN IT resources. Chose "CNAF" from the drop-down menu.Then, as contact name you have to choose Carmelo Pellegrino. Finally, click on the "Next step" button to proceed.

• Read and accept the disciplinary regulation for the use of INFN IT resources and then click on the "Next step" button and submit your request.
• You will now have to wait for both the verification office to get back to you to schedule the in-person verification and for the contact person to approve your request to use IT resources.