You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (JIRA)" <ji...@apache.org> on 2018/06/11 07:21:00 UTC
[jira] [Commented] (SYNCOPE-1270) OpenID Connect client feature
[ https://issues.apache.org/jira/browse/SYNCOPE-1270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16507748#comment-16507748 ]
Francesco Chicchiriccò commented on SYNCOPE-1270:
-------------------------------------------------
More commits:
* master
** https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=commit;h=f57cb310537d9a907c4aa55484938e02c9361733
** https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=commit;h=ff597a7d53a7a7e602a71db0a2a70f9c074aaf40
* 2_0_X
** https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=commit;h=413963f993ea4e5676c696bec75f5c1ea6154acf
** https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=commit;h=49a88b121653aebd2d8a9b5a16a6f285c6243bf5
> OpenID Connect client feature
> -----------------------------
>
> Key: SYNCOPE-1270
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1270
> Project: Syncope
> Issue Type: New Feature
> Components: extensions
> Reporter: Dima Ayash
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 2.0.9, 2.1.0
>
>
> This feature implements an SSO access to the Enduser UI and Admin Console by using [OpenID Connect 1.0|http://openid.net/connect/] which is a simple identity layer on top of the OAuth 2.0 protocol. It allows Clients to verify the identity of the End-User based on the authentication performed by an Authorization Server, as well as to obtain basic profile information about the End-User in an interoperable and REST-like manner.
> The flow for this feature will be possibly as follow (using Google as an example of OpenID Connect Provider):
> # From Enduser or Admin login UI, the user can choose to be authenticated using Google account.
> # Check if the user has a valid session, otherwise prompts the user to login by redirecting him to the Google Login UI.
> # After the user login successfully to his Google account, grant him an access to Enduser UI or Admin console.
> This will be achieved by following the OpenId Connect required flow, leveraging possibly from CXF features.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)