Sprint 9 Goal

[hmitsch]

DRAFT

Prioritized Themes

1. [LDAP INTEGRATION - MOZ] Change Integration Service (CIS): Manually push data to the queue, validate and store to DynamoDB
2. [MOZILLIANS.ORG]: Finish the hardening/upgrade work (get all open issues closed)

Details

1. [LDAP INTEGRATION - MOZ] Change Integration Service (CIS): Manually push data to the queue, validate and store to DynamoDB
   • [ ] #117 Write user profile to stream (From Mozillians.org)
   • [ ] #118 Sign message with Mozillians KMS Key
   • [ ] #120: Setup CI
   • [ ] #121 Write Stream Processor Identity Vault Connector
   • [ ] #114 Write Stream Processor Identity Driver Connector for Auth0
   • [ ] #116 RP Handle new group information
   • Acceptance Criteria
     • A valid user profile is processed
     • An invalid user profile is rejected
     • An existing user profile is updated
2. [MOZILLIANS.ORG]: Staging environment successfully migrated
   • [ ] Send mozillians.org group & profile changes and events to MozDef (https://github.com/mozilla/parsys/issues/99), (https://bugzilla.mozilla.org/show_bug.cgi?id=1354630)
   • [ ] ElasticSearch security upgrade https://github.com/mozilla/parsys/issues/116
   • [ ] Increase quality in geographic search results (e.g. Berlin)
   • [ ] Connect auditd to mozdef
   • [ ] Continue/wrap up other pending hardening work, see https://github.com/mozilla/parsys/issues/73 (meta issue)
   • [ ] Buy reserved instances
   • [ ] Refactor S3 buckets https://github.com/mozilla-iam/mozilla-iam/issues/23
   • [ ] Migrate Mozillians.org infrastructure: set up a DEV instance
   • [ ] Support Mozillians.org pentesting (multi-sprint accompanying activity), Bug 1357743 and https://github.com/mozilla/iam-project-backlog/issues/94
3. OIDC Library Improvements: Support prompt parameter none instead of the delegation endpoint https://github.com/mozilla/mozilla-django-oidc/issues/94
4. QA Engineering
   • [ ] Mozillians.org search refactor (https://github.com/mozilla/parsys/issues/116): quality assurance
   • [ ] Test automation: Finish session testing work #147
5. [AUTH0 DASHBOARD] Last bit of pre All Hands cleanup
   • [ ] (enhancement) air.mozilla.org missing from dashboard https://github.com/mozilla-iam/sso-dashboard-configuration/issues/17
   • [ ] (bugfix) Run access-proxy in front of SSO dashboard (https://github.com/mozilla-iam/sso-dashboard/issues/107)
6. [RP Cutover] Migrate sprint 8 batch, Migration Plan
   • [ ] #130 Group 0 (in execution) - Stage and Dev instances that are managed by IT or InfoSec
   • [ ] #131 Group 1 (in requirements definition) - Managed within IT (InfoSec, WebOps)
7. [ ] #79 [SECOND OPINION] PoC for end-to-end testing and productionalizing implementation

For mental sanity: Other InfoSec Work

For mental sanity: Other ParSys Work

• CoSS Sprint 9 https://github.com/mozilla/coss/issues/TBD
• Discourse:
  • [ ] Carry on revising multiple email support PR based on review, https://github.com/mozilla/parsys/issues/74
  • [ ] Use silent authentication in discourse

Unplanned Scope

Note: please add any unplanned scope that you worked on here.

Out of Scope / Later Items

Themes which are not yet slated for delivery

• Slack for Community access (@hmitsch currently in conversations with Jason Bradford)
• SSO Dashboard improvements
  • [ ] Re-order apps in SSO view https://github.com/mozilla-iam/sso-dashboard/issues/104
  • [ ] UX: user favorites https://github.com/mozilla-iam/sso-dashboard/issues/92 / frequently used #98
• Get SSO Dashboard launch-ready for community
  • [ ] Implement low- and med-risk alert UI https://github.com/mozilla-iam/sso-dashboard/issues/130
• [AUTH0 LOCK] Prototype new technology stack
  • [ ] #67
  • [ ] Decide on technology stack for Front-end and AWS Lambda (backend)
  • [ ] Create backlog items
• Move AirMo to 'hosted Auth0 Lock'

Logistics

• Out of Office: MON 05 JUN is a public holiday in Germany
• CoSS share: @comzeradd @m-branson focus mostly on CoSS, @akatsoulas supports

[hmitsch]

Duplicate to https://github.com/mozilla/iam-project-backlog/issues/152 due to Github outage/hiccup.