mahara-contributors team mailing list archive

[Kristina Hoeppner <1716820@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When you add an IdP to a SAML auth for an institution, you can add new
metadata, but you cannot remove metadata that you don't want to use
anymore. There should be a way of doing that.

We need to keep in mind that multiple institutions can use the same base
metadata but have different values in their specific setup. Thus, a
simple "Delete this" wouldn't work as the metadata would then also be
deleted for other institutions.

Possible solutions that I can see:

1. Display a list of all metadata providers on Plugins -> SAML and
include which institutions use a particular metadata. If none use it,
display the "Delete" icon and allow it to be deleted (similar to the
SmartEvidence page under Extensions -> SmartEvidence). When clicking
"Delete", a confirmation step should be there though before permanently
deleting the metadata.

2. If a certain metadata is not used anymore, remove it automatically
via cron after a few minutes.

I prefer 1 as that gives more control to a site admin and also quickly
shows her in which institutions which SAML metadata is used, which we
currently don't have.

** Affects: mahara
     Importance: Wishlist
         Status: Confirmed


** Tags: auth

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1716820

Title:
  Delete SAML IdP in the admin area

Status in Mahara:
  Confirmed

Bug description:
  When you add an IdP to a SAML auth for an institution, you can add new
  metadata, but you cannot remove metadata that you don't want to use
  anymore. There should be a way of doing that.

  We need to keep in mind that multiple institutions can use the same
  base metadata but have different values in their specific setup. Thus,
  a simple "Delete this" wouldn't work as the metadata would then also
  be deleted for other institutions.

  Possible solutions that I can see:

  1. Display a list of all metadata providers on Plugins -> SAML and
  include which institutions use a particular metadata. If none use it,
  display the "Delete" icon and allow it to be deleted (similar to the
  SmartEvidence page under Extensions -> SmartEvidence). When clicking
  "Delete", a confirmation step should be there though before
  permanently deleting the metadata.

  2. If a certain metadata is not used anymore, remove it automatically
  via cron after a few minutes.

  I prefer 1 as that gives more control to a site admin and also quickly
  shows her in which institutions which SAML metadata is used, which we
  currently don't have.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1716820/+subscriptions