Policy for SSO authentication

datadryad / dryad-product-roadmap

Repository of issues for Dryad project boards

https://github.com/orgs/datadryad/projects

8 stars 0 forks source link

Policy for SSO authentication #3337

Open jleighherzog opened 6 months ago

jleighherzog commented 6 months ago

As discussed in our Dev + Curator meeting, it would be beneficial to force SSO authentication each time an author initiates a new submission. This will ensure that data publication charges are routed correctly.

Not required for IP-address submissions; Shibboleth only
Must communicate change to those integrated titles that will be impacted

ahamelers commented 6 months ago

@jleighherzog @lauradryad

I have a currently open ticket (#2000) which mentions popping up an alert if the user selects an affiliation different from their tenant. We should talk more about how these things will interact and if we need that alert—it strikes me that it might be annoying, to the user, to have both a mechanism to re-SSO and the affiliation check, potentially within minutes of each other

jleighherzog commented 6 months ago

@ahamelers : Good thinking! Maybe we could see a walk-through of the experience from the author's side? We're blind to that view.

ahamelers commented 6 months ago

Decisions in #2000 and #2711 rely upon how we implement this

ahamelers commented 5 months ago

Like the other 2 tickets, waiting for feedback & decisions on how this will be implemented