Analysis: How to support multiple data receivers for a app

[TheTechArch]

Description

In some scenarios, there is a need for sharing the same app between different orgs.

A concrete example is municipalities that have a shared app to receive data for the same use case.

Requirements

• Each municipality can be authenticated with maskinporten
• XACML policy is set up for each org
• XACML Policy is set up to use data values and check against authenticated org
• App updates datavalues on instance for identification of municipality

Development tasks

• [ ] Application owner system that polls instance API for matching instances is created
• [ ] Storage is updated to support the search for instances with specific data values
• [ ] Authorization is updated to support authorization based on data values

Without 2 & 3 municipalities can download data from other municipalities.

Application owner system

• Perform a search based on app/org and specific datavalues
• Polls and download data if the match
• Marks data as downloaded

For the general purpose this can store data for a configured drive for manual insert inn fagsystem.

The best is to integrate with fagsystem and insert. Not possible in all scenarious

Analysis

Conclusion

Tasks

• [ ] Is this issue labeled with a correct area label?
• [ ] QA has been done

[FinnurO]

4274