Member Impacting Project Overview: UAA 1.0 / Portal 3.0 ... 1.0 portal 3.0 mipo v 2.1.… · Update...

UAA 1.0 / Portal 3.0

07/24/2019

Member Impacting

Project Overview:


Version 1.0


07/24/2019

Table of Contents

Version Control .................................................................................................................... 2 Executive Summary .............................................................................................................. 2 Business Impact ................................................................................................................... 3

Users Impacted ................................................................................................................. 3 Business Functions Impacted .............................................................................................. 3

Technical Impact .................................................................................................................. 3 SPP Systems/Processes Impacted ........................................................................................ 4 Anticipated Member Systems/Processes Impacted ................................................................. 4

Member Requirements .......................................................................................................... 4 Testing ............................................................................................................................... 5 Training .............................................................................................................................. 5 Implementation/Back-out Plan ............................................................................................... 5 Summary of Timeline ............................................................................................................ 5 Project Assumptions ............................................................................................................. 6 Risks .................................................................................................................................. 6 Additional Documentation ..................................................................................................... 6 Communication Plan ............................................................................................................. 6

Liaisons ............................................................................................................................ 6 MIPO and Project Documentation ........................................................................................ 6

Next Steps .......................................................................................................................... 7 FAQs .................................................................................................................................. 7 More Information ................................................................................................................. 7 Appendix A –Testing ............................................................................................................. 9

Version Control

Version Date Author Change Description

1.0 05/10//2019 Tom White Initial MIPO

2.0 06/25/19 Tom White Added sample screenshots, testing kickoff details

2.1 07/23/19 Tom White Adjusted timeline and associated testing

(kickoff/touchpoint) dates

Executive Summary

This update focuses almost exclusively on enhancing the Local Security Administrators user

interface experience. This means a new look to the screens and the introduction of guided software

tours. Guided tours are a series of small pop-ups that guide users through the steps required to

accomplish a task. Guided tours will help train new LSA’s and easily highlight future enhancements.

This should result in a decrease in support calls, compliment the current user’s guide and help

streamline the overall LSA workflow.

Additional enhancements will include the consolidation of the authentication and authorization

modules into a single logical system. This will allow for integration with emerging industry

standards. We will separate functionality into two software solutions, SPP User Authentication and

Authorization (UAA), which was formerly referred to as AuthZ, and Marketplace Portal. Finally, we


07/24/2019

will apply changes to keep the application up to date with the latest technologies and best practices

as defined by the SPP technical architectural team.

Business Impact SPP’s Integrated Marketplace Portal will retain the same functionality, with slight changes to the

overall look and feel. This release moves all account management functionality to the banner

where the employee’s name is displayed in a drop down box.

Local Security Administrators (LSAs) will have new functionality available in the Marketplace Portal

on the “Manage Users” screen for administering passwords and API Keys.

Users Impacted

There is a new look to the screens and the introduction of guided software tours. Guided tours are

a series of small pop-ups that guide users through the steps required to accomplish a task. Guided

tours will help train new LSA’s and easily highlight future enhancements.

Future versions of this MIPO will include screen layouts as they are available.

Business Functions Impacted

LSA

Technical Impact

Summary Release

Update projects to latest version of spring boot and dependencies PORTAL 3.0

Modify login link to redirect user to auth PORTAL 3.0

Menu modifications for auth separation PORTAL 3.0

Modify login link to redirect user to auth PORTAL 3.0

Migrate spp-portal authz screen logic to spp-auth application. Examine all context roots

again. PORTAL 3.0

Automated Regression Tests for Marketplace Portal PORTAL 3.0

Merge file-api and public-data-api into spp-portal PORTAL 3.0

Add endpoint for manage users/ user report download UAA 1.0

Back end changes for "lsa mode" functionality UAA 1.0

Remove CORS settings from back end code UAA 1.0

Modify spp-auth 1.0.0 codebase for logging changes UAA 1.0

Change /api/principal endpoint to allow unauthenticated access UAA 1.0

Add csrf get endpoint to spp-auth UAA 1.0

Setup api client with new endpoints UAA 1.0

Hookup React Common Sections UAA 1.0

Spp-Auth front end code added to backend project UAA 1.0

React Component Group 17 - Document Administration Development UAA 1.0

React Component Group 16 - Application Page Development UAA 1.0

React Component Group 15 - Create Application Development UAA 1.0


07/24/2019

React Component Group 14 - Manage Applications Development UAA 1.0

React Component Group 13 - Reports Development UAA 1.0

React Component Group 12 - External LSA Review Development UAA 1.0

React Component Group 11 - LSA Documentation Development UAA 1.0

React Component Group 10 - User Page Development UAA 1.0

React Component Group 9 -Create New User Development UAA 1.0

React Component Group 8 - Manage Users Development UAA 1.0

React Component Group 7 - Answer Security Questions Development UAA 1.0

React Component Group 6 - Change Password Development UAA 1.0

Update project to latest version of spring boot and dependencies UAA 1.0

React Component Group 5 -Account Management Development UAA 1.0

React Component Group 4 - Home Page Development UAA 1.0

React Component Group 3 - Account Recovery Development UAA 1.0

React Component Group 2 - Login Page Development UAA 1.0

React Component Group 1 - Common Development UAA 1.0

Enhanced /principal endpoint UAA 1.0

Add CDD tests to Auth application UAA 1.0

Create a GET endpoint for individual user UAA 1.0

Allow generation of API key on user create UAA 1.0

Add an application save endpoint UAA 1.0

Port the document administration back end from portal to auth UAA 1.0

Add the ability to filter external requests list UAA 1.0

Consolidate user list for GET UAA 1.0

Add a certificate info endpoint to the API UAA 1.0

Add document functionality to spp-auth UAA 1.0

Add CDD functionality to spp-auth UAA 1.0

Update spp-auth project tests to JUnit 5 UAA 1.0

SPP Systems/Processes Impacted

No other applications or processes are affected.

Anticipated Member Systems/Processes Impacted

Limited to Marketplace Portal.

Member Requirements Member Impacting Changes:

The look and feel will change with no loss of existing functionality. The underlying

navigational path to individual screens will change.

LSAs will see functionality added to their current Marketplace Portal Local Security

Administration (LSA) screens. Details on these process and screen changes will be provided

in a future version of this MIPO to be distributed in May 2019.

All testing will occur in the Member Testing Environment (MTE).


07/24/2019

Testing Testing Assumptions:

Testing should be performed by the LSA’s who are familiar with usage of the Marketplace

Portal as it currently exists and have a valid client certificate.

Project Liaisons will be responsible for coordinating testing at their company, and reporting back

to SPP on testing progress or issues.

LSA Testing:

Testing of all the Local Security Administration (LSA) screens including:

o Gaining familiarity with new look and feel of all the Local Security Administration

(LSA) screens

o User Role Testing

Training Training Assumptions:

All member companies will identify personnel to receive project-related training and/or

documentation.

All member companies will use the LMS to register for any project-related training sessions,

if applicable.

SPP Training will provide learning opportunities that aid understanding, but each entity will

be expected to certify performance readiness.

Testing kick off meeting.

Implementation/Back-out Plan N/A

Summary of Timeline

Date Responsible

Party Action

05/10/2019 SPP Publish MP Requirements via MIPO

05/31/2019 SPP Publish MP specifications if necessary via MIPO revision

06/21/2019 SPP Publish MP Testing details via MIPO revision

09/04/2019

SPP Member testing kickoff meeting

09/09/2019 –

09/20/2019

Member MP Testing phase

SPP / Member Implementation


07/24/2019

10/08/2019

Project Assumptions SPP assumes all LSAs will participate in testing.

Risks Delays in Development through Testing could impact project schedule at the point of MTE testing.

Additional Documentation N/A

Communication Plan Testing kickoff meeting – 07/10/2019. Meeting registration will be posted to spp.org and

notifications sent to CWG and project liaisons.

Test approach document will be posted on June 21, 2019.

If needed, we will schedule weekly member test meetings from July 15, 2019 – August 09, 2019.

Meeting registration will be posted to spp.org and notifications sent to CWG and project liaisons.

As always, SPP will communicate project and testing updates via the Marketplace Portal

Redesign liaison email distribution list, CWG Exploder and CWG meetings. Members are

encouraged to attend these meetings if possible.

Liaisons

The project requests Project Liaisons to perform the following functions during the project timeline:

– Provide feedback on MIPOs

– Review project documentation and provide feedback

– Facilitate member review of MIPOs, documentation and presentation materials

– Assess milestones and deliverables for feasibility

– Serve as the main point of contact between SPP and member organization

– Review project status and provide the member’s organization status

– Coordinate member implementation and testing efforts

– Represents the member’s interest on the project team

MIPO and Project Documentation

All project communication and information will be posted to the SPP Change Working Group Project

Documentation folder.

Marketplace Portal 3.0

This MIPO will be updated upon change or with any new information, and according to the Member

Project Touch Points and Deliverables. With any update, a redline version will be posted to the

project documentation folder, and the CWG will be notified.

https://spp.org/spp-documents-filings/?id=190761


07/24/2019

Next Steps

Action Assignee Status & Due Date

Send project communication and identify

liaison at member companies as

necessary

CWG Staff

Secretary

Response due? CWG

Representative

MIPO Review Meeting? Project Team/

Liaison

FAQs Frequently asked questions will be added to the document as identified or necessary

Question Origination Answer

More Information At any time, members can ask questions or get more information by completing an RMS ticket

using “Project Inquiries” Quick Pick and this project’s subject option.

RMS link: https://spprms.issuetrak.com/login.asp.

If a new user ID is needed for RMS, click on that link and follow the directions for “Register Now”.

Any questions, comments, or concerns regarding UAA 1.0 / Portal 3.0 should be submitted through

RMS using the “Project Inquiries” quick pick and the ‘Portal 3.0’ Subtype.

https://spprms.issuetrak.com/login.asp


07/24/2019


07/24/2019

Appendix A –Testing


07/24/2019

Appendix B – Sample Screenprints

SPP-User Authentication and Authorization (UAA)

Login Screen


07/24/2019

Welcome to SPP-User Authentication and Authorization (Reviewer’s View)

Welcome to SPP-User Authentication and Authorization (Submitter’s View)


07/24/2019

User Management (Without an User account selected)

User Management (With an User account selected)


07/24/2019

Create New User

User Detail tab of Manage Users screen


07/24/2019

Roles tab of Manage Users screen

External LSA Request tab of the Manage Users screen


07/24/2019

Review External LSA Request screen (Reviewer view)

Review External LSA Request screen (Submitter view)


07/24/2019

Request Detail

Reports

Member Impacting Project Overview: UAA 1.0 / Portal 3.0 ... 1.0 portal 3.0 mipo v 2.1.… · Update...

Documents

Transcript of Member Impacting Project Overview: UAA 1.0 / Portal 3.0 ... 1.0 portal 3.0 mipo v 2.1.… · Update...