To get an outside collaborator an account to access the central cluster, they will first need an IMSS guest account hosted by a PI on campus. Once they have a guest account, they can get access to VPN, email, and other services as if they were a campus user.
Guest accounts are processed by Human Resources:
http://hr.caltech.edu/resources/notices-administrative-guidelines/guest-guidelines