Release | 201720 - Single Sign On - Sprint 1 |
Release
Date | Sept 2017 |
Single sign on will be added to the ClearMatch
application. The concept is to have one level of authentication not only for
all the sections of the application but also allow finance companies to make
use of their own company authentication for the purpose of authenticating users
into the ClearMatch application. The result of this will be that companies will
not need to have separate login credentials for their users to access Clearmatch.
Users will be able to use their company credentials.
Single
Sign In Using OpenId | |
| Finance company users can sign into
Clearmatch using the OpenId. For details on what OpenId is see http://openid.net/what-is-openid/ The sign in page will have the
following options: Access the sign on page with no
“providers” This option will be used by finance
companies that do not use OpenId for authentication and will continue to
login to Clearmatch using the Clearmatch username and password. In order to
do this the url to access clearmatch sign in will be https://fusion.clearmatch.co/ Access the sign in page and have
specific provider options available This option will be used by finance
companies that do use OpenId for authentication and would like to have the
option of using their company authentication as well as allowing users to
enter a username and password. This becomes useful in instances where a
finance company has auditors that come in or perhaps another company that
does their collections etc and they want these users to use a username and
password but for their company users they want to allow them to easily use
their company authentication. In order to do this the url to access
clearmatch sign in will be https://fusion.clearmatch.co/?provider=XXX XXX being the provider name Login directly into a provider without
displaying the sign on page This option will be used by finance
companies that do use OpenId for authentication and would like to log
directly into ClearMatch without displaying the Clearmatch sign in page. In
order to do this the url to access clearmatch sign in will be https://fusion.clearmatch.co/?provider=XXX&skip=1 |
Authorisation
of tasks in Clearmatch | |
| An authorisation code will be added to
the system users. This code will be used by users when they need to authorise
an action in the application. This replaces the need to supply a password for
users and supervisors. |
On
portal - even if member security permission does allow bidding, can still see
bidding menu | |
| - go to member security permission |
help
message used twice on app page | |
| On step 3 of application page the help
message on the “other income” and the “partners income” is referencing the
same message |
| | |
| | |
The
following content, help and validation messages have been added and need to be personalised.
TypeName | Content | Key Name | Page Name |
HelpMessage | empty | ht_raise_partnerincome | Unsecured Loan Application |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
The
following new security permissions are available and need to be assigned to the
correct user groups to enable access.
REMEMBER DO NOT ASSIGN ANY DELETE PERMISSIONS TO ANY
USER GROUPS
Permission Type | Class Name | Can Create | Can Delete | Can Read | Can Update |
Class | ExternalLogin | 1 | 0 | 1 | 1 |
Method Access
Permission
Type | Class
Name | Method
Name |
ClearMatchSystemUser | AddExternalLogin | |
Method | ClearMatchSystemUser | UpdateAuthorisationCode |
Title |
Single sign
on Task Breakdown.doc |