QA -ETC Authentication Using BC Services Card for STR Registration

[rstens]

🧭 Exploratory Testing Charter: Authentication Using BC Services Card for STR Registration

🔍 Scope

This session will focus on validating user authentication using the BC Services Card before allowing access to the STR registration form. We aim to ensure:

1. Correct redirection and identity validation after selecting "Start Registration" on the Housing Landing Page.
2. Seamless user flow between BC Services Card validation and STR registration.
3. Only authenticated users can proceed to the registration form.

---

🎯 Mission

Ensure the identity validation process via BC Services Card is secure and user-friendly. Identify and resolve any redirection, usability, or accessibility issues during authentication.

---

📋 Key Areas to Explore

1. Housing Landing Page and Registration Flow

• Validate that clicking “Start Registration” correctly redirects to the BC Services Card authentication page.
• Confirm that unauthenticated users cannot proceed to the STR registration form.

Test Ideas:

• Attempt to start registration without completing authentication and verify if access is blocked.
• Test with a previously authenticated session to confirm it skips redundant authentication steps.

---

2. BC Services Card Authentication Process

• Ensure the BC Services Card authentication page is correctly displayed and accessible.
• Validate the transition from authentication back to the registration form.

Test Ideas:

• Test successful authentication and confirm redirection to the Contact Information Page.
• Attempt to cancel authentication midway and confirm the user returns to the Housing Landing Page.

---

3. Session Management and Error Handling

• Ensure sessions are correctly managed across the BC Services Card and STRR system.
• Validate error handling during authentication failures or session timeouts.

Test Ideas:

• Trigger authentication errors (e.g., invalid card) and confirm error messages are informative.
• Simulate session timeout during registration and validate the reauthentication process.

---

4. Accessibility Validation

• Ensure the authentication process and forms are fully accessible via keyboard and screen readers.

Test Ideas:

• Navigate the BC Services Card authentication page using a keyboard.
• Use a screen reader to confirm all form elements are correctly described.

---

🔑 Business Rules to Validate

• BC Services Card Validation: Users must authenticate before accessing the registration form.
• Authenticated Users Only: Only verified users can proceed to the STR registration form.
• Session Management: If the session times out, users must reauthenticate.

---

🛠 Test Data

• BC Services Card credentials for testing successful and unsuccessful authentication.
• Test scenarios with expired sessions to ensure reauthentication flows are correctly implemented.

---

📌 Risks and Focus Areas

• Authentication Failures: Users might face errors or become stuck in the process.
• Redirection Loops: Incorrect redirection between BC Services Card and the STR system.
• Accessibility Gaps: Ensure all forms and buttons are accessible and user-friendly.

---

📅 Test Session Details

• Duration: 90 minutes
• Resources: BC Services Card test environment, keyboard, screen reader tools
• Focus: Authentication flow, redirection, session management, and accessibility

---

🚀 Charter Outcomes

This session should deliver:

1. Identification of authentication flow issues and usability bottlenecks.
2. Validation that session management and error handling work as expected.
3. Detection of accessibility issues with actionable recommendations.
4. Confirmation that only authenticated users can proceed to the registration form, ensuring secure access.

[rstens]

Tester:

• [ ] Done

Session 1: Housing Landing Page and Registration Flow

• Focus: Validate the redirection flow from the Housing Landing Page to BC Services Card authentication.
• Scope: Ensure clicking “Start Registration” correctly redirects users to the authentication page and blocks unauthenticated users from accessing the registration form. Verify handling of previously authenticated sessions.
• Goal: Confirm seamless redirection and secure access to the registration form.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References:

---

[rstens]

Tester:

• [ ] Done

Session 2: BC Services Card Authentication Process

• Focus: Test the authentication flow via the BC Services Card.
• Scope: Validate successful authentication and redirection to the Contact Information Page. Confirm that canceling authentication returns the user to the Housing Landing Page.
• Goal: Ensure smooth authentication and proper redirection behavior.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References:

---

[rstens]

Tester:

• [ ] Done

Session 3: Session Management and Error Handling

• Focus: Validate session management across the BC Services Card and STRR systems.
• Scope: Test authentication errors (e.g., invalid card) and confirm informative error messages. Simulate session timeouts and validate reauthentication processes.
• Goal: Ensure correct session handling and clear error messaging.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References:

---

[rstens]

Tester:

• [ ] Done

Session 4: Accessibility Validation

• Focus: Ensure the authentication process is accessible for all users.
• Scope: Test keyboard navigation for the authentication page and confirm that screen readers correctly describe all form elements.
• Goal: Ensure compliance with accessibility standards for authentication and registration flows.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References:

---

[rstens]

Tester:

• [ ] Done

Session 5: Business Rules Validation

• Focus: Confirm compliance with business rules for authentication and access control.
• Scope: Ensure users must authenticate before accessing the registration form. Verify session management rules, such as reauthentication after timeouts.
• Goal: Validate that only authenticated users can proceed to the registration form.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References:

---

[rstens]

Tester:

• [ ] Done

Session 6: Key Scenarios and Edge Cases

• Focus: Explore key scenarios and edge cases for authentication and redirection.
• Scope: Test scenarios such as mid-process cancellations, multiple failed authentication attempts, and reauthentication after session timeouts. Ensure redirection flows function smoothly without loops.
• Goal: Identify edge cases and confirm robust handling of authentication flows.

Documentation

Time Spent:

What did you Test?

Any observations you want to share?

Bug Report References: