Release Notes - 201720 - Single Sign On - Sprint 1

Release Notes - 201720 - Single Sign On - Sprint 1

Release

201720 - Single Sign On - Sprint 1

Release Date

Sept 2017

 

1. Summary

 

Single sign on will be added to the ClearMatch application. The concept is to have one level of authentication not only for all the sections of the application but also allow finance companies to make use of their own company authentication for the purpose of authenticating users into the ClearMatch application. The result of this will be that companies will not need to have separate login credentials for their users to access Clearmatch. Users will be able to use their company credentials.

 



2. Take Note Of

 

 

  

3. Release Details









 

 

 

 


 

Single Sign In Using OpenId


 

Finance company users can sign into Clearmatch using the OpenId. For details on what OpenId is see http://openid.net/what-is-openid/

 

The sign in page will have the following options:

 

Access the sign on page with no “providers”

This option will be used by finance companies that do not use OpenId for authentication and will continue to login to Clearmatch using the Clearmatch username and password. In order to do this the url to access clearmatch sign in will be https://fusion.clearmatch.co/

 

Access the sign in page and have specific provider options available

This option will be used by finance companies that do use OpenId for authentication and would like to have the option of using their company authentication as well as allowing users to enter a username and password. This becomes useful in instances where a finance company has auditors that come in or perhaps another company that does their collections etc and they want these users to use a username and password but for their company users they want to allow them to easily use their company authentication. In order to do this the url to access clearmatch sign in will be https://fusion.clearmatch.co/?provider=XXX

 

XXX being the provider name

 

Login directly into a provider without displaying the sign on page

This option will be used by finance companies that do use OpenId for authentication and would like to log directly into ClearMatch without displaying the Clearmatch sign in page. In order to do this the url to access clearmatch sign in will be https://fusion.clearmatch.co/?provider=XXX&skip=1 


 


 

Authorisation of tasks in Clearmatch


 

An authorisation code will be added to the system users. This code will be used by users when they need to authorise an action in the application. This replaces the need to supply a password for users and supervisors.


 


 

On portal - even if member security permission does allow bidding, can still see bidding menu


 

- go to member security permission
- go to member and remove ability to create and edit bids
- login to portal
- go to browse applications
- the "place bid " option is still visible, it should not be


 

help message used twice on app page


 

On step 3 of application page the help message on the “other income” and the “partners income” is referencing the same message

 

 

4. Data Warehouse

 


 

 

 

 

 

 



5. Portal Content (Content Blocks, Validation Messages, Help Messages)

 

The following content, help and validation messages have been added and need to be personalised.

TypeName

Content

Key Name

Page Name

 HelpMessage

 empty

 ht_raise_partnerincome

 Unsecured Loan Application

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 


 


6. Security Settings Added

 

The following new security permissions are available and need to be assigned to the correct user groups to enable access.

 

REMEMBER DO NOT ASSIGN ANY DELETE PERMISSIONS TO ANY USER GROUPS

 

Class Access

Permission Type

Class Name

Can Create

Can Delete

Can Read

Can Update

Class

ExternalLogin

1

0

1

1

 

Method Access

Permission Type

Class Name

Method Name

Method

ClearMatchSystemUser

AddExternalLogin

Method

ClearMatchSystemUser

UpdateAuthorisationCode

 

  

7. Documents To Reference

 

Title

Single sign on Task Breakdown.doc