Revoke All Endpoint (requires research)

department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:

https://depo-platform-documentation.scrollhelp.site/index.html

280 stars 195 forks source link

Revoke All Endpoint (requires research) #48398

Open joeniquette opened 1 year ago

joeniquette commented 1 year ago

review doc for notes: https://docs.google.com/document/d/1WrEql7TQokx9l5VGPQQui-x1NpilCMgIKAMqt8LhtvE/edit

Next steps:

Research oauth logout compliance requirement
Start with research based on “where would you expect to find this” without showing them anything to start with
- After this show some ideas of where we think we want to place it
Generate some low fidelity and mobile mockups of revoke all ideas
- Name drop down
- Account security option
- Modal of confirm you want to logout all sessions
- Show users where they are logged into
- Session timeout modal*

asg5704 commented 1 year ago

This needs research from UX and will need to go through the Collab Cycle in the final stages

Essentially, we want to add a place where users can revoke access to all signed-in devices.

Where do users expect to be able to view this? (Information Architecture)
What do they think will happen when they click the button? (Content)

Questions to ask UX

Can we get feedback from a Survey?

kingbmike commented 2 months ago

@asg5704 @claytonzook Can this ticket be closed given the newer Manage Devices work that has been done? If so, I will close, if not I will move to different epic as 'tech debt' epic for SiS is going away.

claytonzook commented 2 months ago

@kingbmike All the UX research/design components were completed on this. My feeling is this ticket can close.