Sprint 14 Goal

[hmitsch]

Prioritized Themes

1. RP Cutovers, Sprint 14 bit
2. Mozillians.org Q2 OKR Leftovers
3. Initiate work on SSO Dashboard Q3 Goal
4. SSH Federated Access (multi-sprint) #169
5. Mozillians.org Infrastructure debt repayment
6. ~IAM Q3 OKR (Share a G Suite document with a Mozillians.org group): Crushing the Boulder~ (deprioritized stop starting and start finishing on the many other open ends we currently have)

Details

1. RP Cutover: Migration Plan
   • [ ] Group 3 (Cutover coordinated independently) #133
   • [ ] Decom RPs that won't migrate #61
2. Mozillians.org Q2 OKR Leftovers
   • [ ] AWS metadata proxy https://github.com/mozilla/parsys/issues/217
   • [ ] Make Mozillians.org group updates just-in-time (already DONE?)
   • [ ] CIS Whitelist group: enroll more people
   • [ ] Bug 1391632 UI to invite users to groups can mislead users to add the wrong users
   • [ ] userinfo endpoint does not return https://github.com/mozilla-iam/cis_functions/issues/25
   • [ ] (from #iam) architecture review to clarify some of the future of the service from a docs perspective
   • [ ] (from #iam) I'd hate to have to have a FAQ "I can't login to taskcluster" "A: go to mozillians and set your t-shirt size. people without t-shirt sizes are prohibited"
   • [ ] (attn @LeoMcA) Make Discourse compatible with the 'cis_whitelist' group. Goal: Replace access to https://discourse.mozilla.org/c/iam/internal with Q2 OKR mechanics)
3. SSO Dashboard Q3 Goal: User alerts
   • [ ] SSO Dashboard: Implement low- and med-risk alert UI https://github.com/mozilla-iam/sso-dashboard/issues/130 ("Your version of Firefox is out of date")
   • [ ] (bug) Fetch user full name from mozillians.org https://github.com/mozilla-iam/sso-dashboard/issues/158
4. SSH Federated Access (multi-sprint) #169
   • [ ] Finalize project documentation (https://mana.mozilla.org/wiki/display/SECURITY/Auth0+and+SSH)
   • [ ] POC Client-side
   • [ ] POC Server-side
   • [ ] POC IT Deploy with original groups
5. Mozillians.org Infrastructure Cleanup
   • [ ] Finish off CDN work
6. QA Engineering
   • [ ] Automate CIS tests - Verify that updates to a mozillians profile are visible in auth0 #199
7. Other things
   • [ ] (optional) Fix Lock (library) upgrade issues https://github.com/mozilla-iam/auth0-deploy/issues/143

For mental sanity: Other InfoSec Work

1. Accommodate Auth0 OIDC Conformant mode requirements #171
   • [ ] Create a list of RPs to decide next steps (test, coordinate with owners, switchover)
2. "Second Opinion" #79
   • [ ] Productionalize

For mental sanity: Other ParSys Work

1. [ ] CoSS Sprint 14 https://github.com/mozilla/coss/issues/285
2. [ ] [Discourse] https://github.com/mozilla/discourse/milestone/3
3. [ ] Bug 138342 - OVH servers are down

Unplanned Scope

Note: please add any unplanned scope that you worked on here.

Out of Scope / Later Items

Themes which are not yet slated for delivery

• Q3 OKR Crushing the Boulder
  • Review and update Sprints 2017Q3 (Infosec) https://github.com/mozilla-iam/iam-project-backlog/issues/173
  • Solution architecture (data classification)
  • Stories (aka GitHub issues)
  • Pairing plan
• [ParSys] Kick off Kubernetes pilot project
• Mozillians.org Binary search: get it to DONE-DONE
• Pre-plan LDAP to CIS connector (publisher) @andrewkrug
• Now that we have Q2 OKR in PROD (defer until CIS Whitelist is removed):
  • Slack for Community access (next iteration of the current manual NDA Pilot)
  • TechSpeakers Discourse group
  • Reps Discourse group
• [Fix bug 1201027] Simplify Profile status UI https://github.com/mozilla/mozillians/pull/1436
• Groups grid UI enhancements https://github.com/mozilla/mozillians/pull/1426/
• (Mentoring) Bug 847911 Create a view with all vouched mozillians
• (Mentoring) Bug 1333373 Redesign footer based on new brand identity
• Automated ServiceNow ticket creation for SSO Dashboard deployments
• Implement API Key Support on behalf of RPs
• WorkDay/CIS API-based integration
• Move AirMo to 'hosted Auth0 Lock'
• SSO Dashboard improvements
  • (bugfix) Run access-proxy in front of SSO dashboard (https://github.com/mozilla-iam/sso-dashboard/issues/107)
  • UX: user favorites https://github.com/mozilla-iam/sso-dashboard/issues/92 / frequently used #98
  • Fix SSO with ParSys properties
• [AUTH0 LOCK] Prototype new technology stack
  • Sign Up UI design #67
  • Decide on technology stack for Front-end and AWS Lambda (backend)
  • Create backlog items
• Bug 1373894: Potential XSS in Mozillians.org

Logistics

• Consulted: https://github.com/mozilla-iam/iam-project-backlog/issues/173
• Out of Office: @hmitsch on vacation in week 21-25 AUG
• CoSS share: @comzeradd focus mostly on CoSS