For the What's Next at SURFconext event of the 20th of March 2018 we've created a demo-flow. Any questions about this demo you can email to raoul.teeuwen@surfnet.nl .
It's our intention this demo 'always works', but we don't test it every week or so. If it somehow broke, please let us know!
If you want to show this demo to someone else while already having been signed-up, you can use a private browser window and sign-up again.
If you use this option, don't forget to execute EVERY step in a private window, also opening the confirmation email link. |
COmanage, part of the current SCZ-setup, lets administrators define several types of invitation flows. You can find more about that in the documentation.
For the demo we've configured a self signup invitation flow. It's basically a URL you can attach to a text or a button, such as "Sign up for our XXX research collaboration". To enter the demo, click that link.
For the demo, you can currently only login with a Google-account. Why? As your institution probably hasn't connected their IdP (user database) to the SCZ-proxy, you can't use your institutional account to login. So if you don't have a Google account, either you create one or we're sorry but currently you can't use this demo. Please email raoul.teeuwen@surfnet.nl if this is a problem for you, so we'll try to give more priority enabling more demo identity providers.
This demo flow is configured such that, after clicking the link above:
- As a new user, you're presented a form, to fill out some personal information (Given name and Gmail address).
- After clicking SUBMIT, you see the screen display some provisioning steps after which you're logged out of COmanage.
- Check your inbox: an email is sent to the email address supplied, to confirm you have control over that email address. Click the link in the email.
- After clicking the link in the email, you're taken to a COmanage screen where you can Accept or Decline the registration.
- After clicking ACCEPT, you're taken to a login screen. Depending on what email address you've used, you need to select the corresponding IdP. In the demo please select the SCZ Google IdP in the Where Are You From (WAYF) screen: as in most WAYF-screens you can start typing the name of your IdP in the input field, instead of scrolling the whole list.
- Login at Google with your Google credentials.
- If your authentication was successful, you should now be signed into COmanage. Some steps of the enrollment will be automatically taken and displayed. After the final step, you're signed out. Click LOGIN and sign in with the SCZ Google IdP. Assuming you do so successfully, you should see:
- Click on "What's Next? Demo CO". This should take you to this screen:
- Click "Services" on the left. From that screen you can access a demo Wordpress site (the icon of the globe).
- In the previous steps, you've created a COmanage account and linked it to your Google-id. You can now use it to authenticate at the demo Wordpress-site, which you can directly (so without COmanage in between) visit via https://wordpress.demo.scz.lab.surf.nl/ . On the Wordpress site, you can find the Login option in the lower right corner
- After clicking 'Log in' select 'Log in via Science Collaboration Zone', the blue bar at the bottom, below the "OR"-line
- After clicking 'Log in via Science Collaboration Zone', select the SCZ Google IdP, and use the credentials you used to sign up for COmanage (depending on your actual activity, Single Sign-On might be active, making it so you don't need to enter your credentials again.
- In this demo, you're allowed access to the dashboard of Wordpress.
- If you email raoul.teeuwen@surfnet.nl that you would like more rights in the SCZ What's Next demo (do so from your institutional account (so Raoul knows who he is giving additional rights), and mention the gmail-address you used) Raoul will at some moment grant you additional rights by adding you to a group "Wordpress:authors" in COmanage, at which moment you'll be notified of that action and on your next login at the Wordpress demo site, you have more rights and possibilities (you will be able to publish and edit blogs).
This demo currently is showing you how one flow (of many, configurable) works and how a researcher could access a service based on the credentials and attributes in COmanage. Over time, we plan to extend the demo to show more aspects, like non-web access.