2017-05-31 User Management Meeting Notes

• Initial assumption was that SSO users would be pre-loaded via bulk user import
• Proposal: SSO login triggers provisioning of patron record
• Phase 1: just use SSO for authentication
• Phase 2: use authorization metadata to assign permissions
• Separate handling of staff/patrons? No. Patrons likely will not be logging in to

Picking up from last week... shift from bulk pull process to a push-based API. There are plans for an API endpoint that would provide this functionality.

Need to be able to authorize an application to talk to APIs. Token-based system would provide this, Istvan will explore this with Jakob.

Push-based API needs some sort of error handling

Do we need an API that supports a batch of users to be loaded? Maybe as a 2nd pass.

Demo of UI wireframes for proxy options

• 'Proxy for' and 'Proxied by' options
• Two options for modal that selects proxy user - one simpler search, one that is simliar to main search.