2026 Program

We will present advanced topics for administrators of Globus Connect Server (GCS) and Globus Compute multi-user deployments. We will focus on newer GCS features such as ACL expiration and policies for restricting shared access to specific domains, as well as configuration and use of the Globus streaming service. We will also discuss how to set up Globus Compute multi-user endpoints in common environments such as Slurm clusters. This session will include hands-on exercise for experimenting with these advanced Globus capabilities. Time will be reserved at the end of the session to address questions and provide guidance tailored to your specific Globus deployment requirements.

We will review notable events in the evolution of the Globus service over the past year, and provide an update on future product direction and sustainability.

Large-scale voter datasets such as the L2 Voter File now span multiple terabytes and pose significant challenges for secure transfer, storage optimization, and compliance-driven collaboration. This session presents a case study from computational research at the University of Chicago examining South Asian voting behavior in the United States using L2 data hosted on the Research Computing Center.

The project required managing high-volume, privacy-sensitive data under strict licensing agreements while maintaining efficient and reproducible research workflows. Globus played a central role in securely transferring filtered datasets from RCC storage to approved research environments, enabling controlled collaboration across researchers, and reducing redundant data storage. We will discuss practical lessons learned, including endpoint configuration, access controls, performance tuning for large transfers, and best practices for handling frequently updated datasets.

Attendees will gain applied insights into using Globus within computational social science projects where data scale and compliance constraints intersect. This session highlights how Globus supports scalable, secure, and reproducible research workflows beyond traditional high-performance computing domains, particularly in democratic and policy-focused data science contexts.

Motivated by the growing data sharing and collaboration needs in the research enterprise, we will describe how Globus services may be used to dramatically increase the value of your research. In this session we will demonstrate how to easily generate and deploy a data portal for a guest collection—and automatically generate and ingest metadata into a Globus Search index—enabling data publication that meets FAIRness mandates while ensuring compliance with security and privacy regimes. We will also demonstrate how you can integrate Globus Compute into your portal, transforming it into a true science gateway that facilitates analysis of your data by collaborators.

Northwestern University offers researchers a Google Cloud hosted Secure Data Enclave (SDE) aligned with NIST SP 800-171 compliance standards to support controlled research computing. While this model provides the needed technical controls, securely transferring data in and out of the environment introduces compliance-driven complexities that must be carefully managed.

In this session, we will explore our deployment of a Globus Connect Server (GCS) endpoint inside the SDE boundary, using a High Assurance Storage Gateway to interface with Google Cloud Storage while preserving enclave compliance. We will walk through mapping the SDE project structure to Globus Collections, enabling predictable and efficient data transfer workflows without weakening controls.

The talk is based on the Northwestern SDE deployment strategy and focuses on how cloud administrators could replicate a similar approach, including:

• Infrastructure configuration: sizing and securing the GCS node in the Google Cloud VPC, including firewall rules and egress restrictions
• Identity and registration: endpoint identity in a federated environment and High Assurance requirements
• GCS configuration: storage gateway setup for Google Cloud Storage and mapping distinct Ingress/Egress buckets to segregate behaviors
• Access control and guardrails: configuring collection roles and access policies to enforce least privileged permissions and reduce accidental exposure
• Operational workflows: how researchers move data through Ingress and Egress while working within their Workspace and without bypassing SDE technical controls

Attendees will leave with a set of best practices to follow, key design decisions to make early, and common pitfalls that can slow deployment or create support issues if not handled up front.

The Customer Forum is an opportunity for Globus subscribers to discuss their experiences with the service, to learn about our product development plans, and to provide input on future product directions. Attendance at the customer forum is by invitation only. If you would like to represent your institution/community please contact us for an invitation.