Документ взят из кэша поисковой машины. Адрес оригинального документа : http://www.stsci.edu/institute/stuc/apr-2015/mast.pdf Дата изменения: Unknown Дата индексирования: Sun Apr 10 19:18:55 2016 Кодировка: Поисковые слова: jet

Archive Single Sign-
on (SSO) Implementa7on
Karen Levay for



SSO Team

April 17, 2015




Single Sign-
On (SSO)
· What is SSO?
o A Single Sign-
On (SSO) service provides to the End User the capability to login once and gain access to all authorized STScI systems without being prompted to login again for each one of those systems
· One Username and Password to access mul2ple services

· Why do we need SSO?
o Improves user experience, consolidates passwords, improves security and allows for user sta7s7cs/history/seOngs


· Exis7ng SSO enabled services at STScI were for internal employee use


· SSO Service expanding to include non-
STScI individuals
· Archive with SSO effec2ve April 13th, a=er HST Phase 1 Proposal Deadline

· Poten7ally 100 STScI services could be SSO-
enabled, including Grants Management Systems, Exposure Time Calculator, Web-
Astronomer Proposal Tool, Confluence, etc.


April 17, 2015




SSO Characteris7cs
· SSO Login Dura7on
o 4 hour sliding window; up to 10 hours -
mimics a workday o If a user does not use an SSO service for 4 hours, the user will need to log in again o Assumes users do not close their browser


· Password ­ for external users
o o o o Expires a[er 2 years Users can follow a link from login page to reset their own password Lock out a[er 5 a\empts, then a 15 min wait Send mail to help@stsci.edu



April 17, 2015

3




Iden7ty Management
· External users can create their own account · Enables users to change their registered a\ributes
o Reset password o Change email address, telephone number, etc.



April 17, 2015


SSO FAQs

April 17, 2015

5


Registered Archive Account Types
· Archive Accounts
o At the 7me of transi7on there were > 13,000 Archive registered users
· Most accounts haven't been used in years · Some people had several accounts

o To plan the transi7on to SSO, we separated users into 3 categories:
1. STScI users 2. External authorized users ­ able to retrieve proprietary data or other special cases (506) 3. All other users (~12,000)

April 17, 2015

6


STScI Archive Accounts
· All current archive accounts for STScI staff were transi7oned to an SSO account
o No ac7on required by staff o Any privileges transferred with the iden7ty

· For external accounts with access to proprietary data
o o o o Accounts were created in new iden7ty manager Permissions linked to new account Account holders need to set their password Email has been sent with explana7on and where to reset password

· For external accounts without access to proprietary data
o Current accounts were re7red o Mail sent with explana7on and where to register for a new account


April 17, 2015


No7fica7on
· Mail sent to all users twice
o First a warning that it would happen o ~ 5000 bounced email messages

· · · · · · · ·



Mail sent to users a[er installa7on Web page explaining the changes Web page to see if your account was transi7oned Help pages SSO FAQ Video What's New announcement Social media ­ Facebook, Twi\er

April 17, 2015


Check Your Account

April 17, 2015


Archive User Experience

April 17, 2015


Mast UI: Retrieval Op7ons­ Changes

April 17, 2015

Archive SSO All-
Hands

11


Starview Changes

April 17, 2015

Archive SSO All-
Hands

12


StarView Changes

April 17, 2015


StarView Changes

April 17, 2015


April 17, 2015


Account Support
· All account ques7ons should go to help@stsci.edu
o help will send account issues to ITSD support helpdesk o help will send archive and proprietary data access issues to archive helpdesk

April 17, 2015