Project

General

Profile

Actions

Bug #3465

closed

[SSO] Research requirements to upgrade SSO codebase to use oauth2 (or openid connect)

Added by Ward Vandewege over 9 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
-
Target version:
Story points:
3.0


Subtasks 2 (0 open2 closed)

Task #4379: Talk to Ward about what this involvesResolvedPeter Amstutz11/05/2014Actions
Task #4429: Document authentication dance between Workbench, API, SSO and external identity providerResolvedPeter Amstutz11/05/2014Actions

Related issues

Related to Arvados - Feature #4570: [SSO] Implement Google OAuth2 for new SSO installationsResolvedPeter Amstutz11/05/2014Actions
Actions #1

Updated by Tom Clegg over 9 years ago

  • Target version set to Arvados Future Sprints
Actions #2

Updated by Ward Vandewege over 9 years ago

  • Subject changed from [Docker] upgrade SSO codebase to use oauth2 (or openid connect) and migrate auth.curoverse.com to [Docker] upgrade SSO codebase to use oauth2 (or openid connect)
Actions #3

Updated by Ward Vandewege over 9 years ago

The SSO server uses openid to authenticate with Google. Internally, it uses oauth2 to talk to the Arvados services.

Google is phasing out openid support, cf. https://developers.google.com/accounts/docs/OpenID.

The reason we used openid to authenticate with Google, is that it requires no Google token or account for the SSO server. This makes deployment easier.

Actions #4

Updated by Ward Vandewege over 9 years ago

  • Target version changed from Arvados Future Sprints to 2014-11-19 sprint
Actions #5

Updated by Ward Vandewege over 9 years ago

  • Subject changed from [Docker] upgrade SSO codebase to use oauth2 (or openid connect) to [SSO] upgrade SSO codebase to use oauth2 (or openid connect)
Actions #6

Updated by Ward Vandewege over 9 years ago

  • Assigned To set to Peter Amstutz
Actions #7

Updated by Peter Amstutz over 9 years ago

  • Description updated (diff)
Actions #8

Updated by Peter Amstutz over 9 years ago

  • Story points changed from 2.0 to 5.0
Actions #9

Updated by Peter Amstutz over 9 years ago

  • Story points changed from 5.0 to 3.0
Actions #10

Updated by Peter Amstutz over 9 years ago

  • Subject changed from [SSO] upgrade SSO codebase to use oauth2 (or openid connect) to [SSO] Research requirements to upgrade SSO codebase to use oauth2 (or openid connect)
Actions #11

Updated by Peter Amstutz over 9 years ago

  • Status changed from New to Resolved
Actions #12

Updated by Peter Amstutz over 9 years ago

  • Status changed from Resolved to New

Workbench authentication process documented at Workbench authentication process

Actions #13

Updated by Peter Amstutz over 9 years ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF