...
- Single SSH hop from client systems anywhere on the internet to servers inside ECMWF (ecGate, HPC, etc)
- Web single sign-on using ECMWF's website and the HID token
- 12 hour sessions allowing multiple connections between re-authentication
- Integration with standard tools such as the OpenSSH ssh client, scp, and ssh-agent
- SCP support, as well as X11 , Agent, and Port forwarding
The single sign-on step is performed using an application called "tsh", every 12 hours.
...