-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
4e03775
commit 3546ee9
Showing
2 changed files
with
14 additions
and
34 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -2,13 +2,16 @@ Welcome to ssop, a Single Sign On Portal which uses login.gov as an Identity Ver | |
|
||
1) Clone ssop repo | ||
2) Change directory ssop | ||
3) Create a virtual environment named venv: python3.8 -m venv venv | ||
NOTE: Python 3.6 not being supported WRT crypto -- no point in staring at 3.7 | ||
3) Create a virtual environment named venv: python3.9 -m venv venv | ||
NOTE: Python 3.6 not being supported WRT crypto | ||
4) Upgrade pip to latest and then pip install -r requirements.txt | ||
|
||
5) If needed, use https://developers.login.gov to establish a sandbox environment, create a team (yourself and collaborators if desired), then create and app. | ||
6) Update LOGINDOTGOV_ related parameters in ssop/settings.py with results from 5 or from a configuration management system (CMS). | ||
7) Update JWT_ related parameters as needed or from a CMS. | ||
7) Update JWT_ related parameters in ssop/settings.py as needed or from a CMS. | ||
8) Update account management parameters in ssop/settings.py as desired | ||
9) Update SSO, AUTH_SAML_*, EMAIL, LOGGING, SSOP_DEPLOY*, DATABASE, possibly other variables in ssop/settings.py as required and/or desired. | ||
9) Deploy AWS resources as needed | ||
|
||
See the images in the screenshot folder to aid with LOGINDOTGOV settings. Also, a final user attributes screen can be seen. | ||
|
||
|
@@ -19,19 +22,23 @@ Files in etc/nginx and etc/systemd/system demonstrate a full webserver with back | |
Once configured enable the services: | ||
sudo systemctl enable ssop_gunicorn.socket | ||
sudo systemctl enable ssop_gunicorn.service | ||
sudo systemclt enable ssop_account_review.service | ||
|
||
And start them: | ||
sudo systemctl start ssop_gunicorn.socket | ||
sudo systemctl start ssop_gunicorn.service | ||
|
||
sudo systemclt start ssop_account_review.service | ||
|
||
After any python code changes | ||
sudo systemctl restart ssop_gunicorn.service | ||
|
||
The SELinux section is very applicable during this phase | ||
|
||
It works best to use an incognito window. Otherwise the only way to truly logout is close the browser. Using an incognito windows allows for a fresh session for each login test. | ||
|
||
Only tested with Chrome. | ||
Tested mostly with Chrome. | ||
Also appears to Firefox. | ||
Safari and CAC stil do not play well together | ||
|
||
------------------------------------------- | ||
|
||
|
@@ -90,3 +97,4 @@ SELINUX content and user types: | |
|
||
Kirk Holub | ||
[email protected] | ||
29 Dec 2023 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,29 +1 @@ | ||
[email protected],David,Tomalak | ||
[email protected],Woody,Roberts | ||
[email protected],Nnauslar,Nnauslar | ||
[email protected],Chaskell,Chaskell | ||
[email protected],Cfdierking,Cfdierking | ||
[email protected],Basil,Newmerzhycky | ||
[email protected],Dborsum,Dborsum | ||
[email protected],Rkrohn,Rkrohn | ||
[email protected],Eugene,Berger | ||
[email protected],Dan,Nietfeld | ||
[email protected],Kirk,Holub | ||
[email protected],Jebb,Stewart | ||
[email protected],Scott,Nahman | ||
[email protected],Curtis,Alexader | ||
[email protected],Bunnypfau,Bunnypfau | ||
[email protected],Mvrencur,Mvrencur | ||
[email protected],Bernadette,Pfau | ||
[email protected],Michael,Vrencur | ||
[email protected],#None,None | ||
[email protected],tomalakd,tomalakd | ||
[email protected],newFirst,Last | ||
[email protected],Linus,Kamb | ||
[email protected],Jamie,Rhome | ||
[email protected],Wallace,Hogsett | ||
[email protected],Taylor,Trogdon | ||
[email protected],Michael,Brennan | ||
[email protected],Pablo,Santos | ||
[email protected],Nathan,Hardin | ||
[email protected],Nreimer,Nreimer | ||
|