Test Accounts (Per -- Local/Internal IdP Login Account)

[Thorsten Michels]

Am 31.07.2019 um 19:55 schrieb Cantor, Scott:

> 
> But yes, it points out that authentication is really not the issue
> with test accounts, it's the data that's the problem, and in the end
> it's all production, not test. Data just has the meaning you choose
> to give it, and you have to carefully think about it end to end
> before doing anything, unless it's closely held.
> 
> So, no, I would never issue a test account to a vendor in any real
> sense. Not without an end to end strategy with security controls on
> the usage to limit it to specific services and a careful plan for
> what the data would look like.

Here
https://doku.tid.dfn.de/de:shibidp3testzugang_fuer_externe_admins
are two technical solutions for restricting an account to a specific 
service via activation conditions in the data connectors. The web page 
is in German, but the code examples should be understandable. Feel free 
to ask me. Comments are welcome.

Best regards,
Thorsten

-- 
Thorsten Michels
RHRK
TU Kaiserslautern
Postfach 3049
67653 Kaiserslautern
Tel.: 0631/205-2443