REVIEW-52: XCI-317 XSEDE Web SSO Design - Design/Security Review

Overview

General design and security risk review for XSEDE Web SSO

Review Summary

Significant feedback provided and addressed in the design document. See the discussion forums.

Review Output Documents (Final)

https://software.xsede.org/svn/xci/activities/xci-317/trunk/Deliverables/Web-SSO-Overview.pdf

https://software.xsede.org/svn/xci/activities/xci-317/trunk/Deliverables/XCI-317_Web_SSO_Design-v1.4.pdf

Review Input Documents

https://software.xsede.org/svn/xci/activities/xci-317/trunk/Deliverables/XCI-317_Web_SSO_Design-v1.0.pdf

Review Criteria

Please focus on these questions:

  1. Are the proposed Web SSO graphical elements clear about what the function does for users and unambiguous so that users understand the different types of web login that are available?
  2. Do the proposed Web SSO graphical elements following XSEDE web branding and style guidelines and broader internet web design conventions?
  3. Is the design of the interaction between the client and authentication services secure and follow XSEDE security best practices?
  4. Is the design as straightforward and simple to implement by web server developments and administrators as possible?

Schedule

Current Date: 2025-02-09
Current Status: Closed (Design and Security Review)
Target Date Actual Date Activity Milestone
  2018-02-05 Review launch date
2018-02-12 2018-02-26 Written feedback due (Reviewers)
2018-02-16 2018-09-21 Written response date (Review Material Developers)
2018-02-19 2018-09-21 Final approval due and completion date (Reviewers)
Review Created: 2018-02-05 7:45 am
Review Last Updated: 2018-10-19 10:51 am

 

Reviewers

If you are a reviewer, please login to sign or withdraw from this review.

Required

  • Maytal Dahan
    SIGNED: 2018-02-12 18:13
  • Kate Kaya
    VIEWED: 2018-11-19 19:11
    SIGNED: 2018-02-12 20:20
  • Lee Liming
    VIEWED: 2018-10-19 10:40
  • John-Paul Navarro
    VIEWED: 2021-01-07 16:05

Optional

  • Jim Basney
  • Eric Blau
  • Rudra Chakraborty
  • Steven Gallo
    VIEWED: 2018-10-10 15:52
    SIGNED: 2018-10-10 15:52
  • Andrew Grimshaw
  • David Hart
    SIGNED: 2018-02-28 17:31
  • Victor Hazlewood
  • Sandra Kappes
    SIGNED: 2018-02-09 11:15
  • Rob Light
    VIEWED: 2018-10-11 12:07
    SIGNED: 2018-10-11 12:07
  • Susan Mehringer
  • Steven Peckins
    SIGNED: 2018-02-12 14:46
  • Gary Rogers
  • Derek Simmel
  • Shava Smallen
    VIEWED: 2020-04-28 23:06

Withdrawn

  • Jennifer Houchins

Review Material Developers

Venkatesh Yekkirala

Review Facilitator

John-Paul Navarro

 

Please post your comments using the "New topic" or "Post reply" buttons in the forum below.