Single Sign On (SSO) prototype implementation

[bryan-robitaille]

Create an SSO prototype implementation using existing open source software that will be hosted in the Forms Staging environment.

Out of Scope

• Branding SSO login
• WCAG 2.0 AA compliance
• Authorization logic (Authorization logic to be done in Platform Applications)

[srtalbot]

As a security assessor I need to know that end-user's form responses are stored in a secure way and only disclosed to those authorized to view them So that we don't experience data leakage

As a program administrator I need to be able to use my government of Canada credentials to login to this service So that I can validate my identity and show I am authorized to access the form data

I need to avoid receiving form responses via email and to be able to get responses in aggregate So that I don't have to ask someone else to do that for me or coallate multiple responses

Constraints:

• We can't hold the data for more than 30 days without increasing TBS's legal risk of unauthorized collecting of people's personal information.