2017-05-31 User Management Meeting Notes

SSO

Vince

• Initial assumption was that SSO users would be pre-loaded via bulk user import

• Proposal: SSO login triggers provisioning of patron record

• Phase 1: just use SSO for authentication

• Phase 2: use authorization metadata to assign permissions

• Separate handling of staff/patrons? No. Patrons likely will not be logging in to

Bulk User Import

@Nagy István

Picking up from last week... shift from bulk pull process to a push-based API. There are plans for an API endpoint that would provide this functionality.

Need to be able to authorize an application to talk to APIs. Token-based system would provide this, Istvan will explore this with Jakob.

Push-based API needs some sort of error handling

Do we need an API that supports a batch of users to be loaded? Maybe as a 2nd pass.

Proxy user selection

@Matthew Sullivan

Demo of UI wireframes for proxy options

• 'Proxy for' and 'Proxied by' options

• Two options for modal that selects proxy user - one simpler search, one that is simliar to main search.