-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Single sign-on update #234
Merged
Merged
Changes from all commits
Commits
Show all changes
2 commits
Select commit
Hold shift + click to select a range
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -34,8 +34,6 @@ Refer to the Cloud Foundry documentation on [using the Cloud Foundry CLI with a | |
|
||
You can sign in to Cloud Foundry using either your [GOV.UK PaaS account information](get_started.html#get-an-account) or the single sign-on function. | ||
|
||
Single sign-on is only available to users within the Government Digital Service (GDS) | ||
|
||
### Use your GOV.UK PaaS account | ||
|
||
The default method to sign in to Cloud Foundry is to use your [GOV.UK PaaS account](get_started.html#get-an-account) information. | ||
|
@@ -58,33 +56,50 @@ The default method to sign in to Cloud Foundry is to use your [GOV.UK PaaS accou | |
|
||
When you have signed in, run `cf` in the command line to see all available commands. | ||
|
||
### Use the single sign-on function | ||
### Use single sign-on | ||
|
||
You can sign in to Cloud Foundry using the single sign-on function. | ||
|
||
Using single sign-on makes managing your security, joining and leaving processes simpler by reducing the number of passwords or accounts you have to manage. | ||
|
||
You must have either a [Google](https://myaccount.google.com/intro) or [Microsoft](https://account.microsoft.com/account) email address to use single sign-on. The email address must be the same as the one you use to sign into your GOV.UK PaaS account. | ||
|
||
#### Enable single sign-on | ||
|
||
Single sign-on is only available to users within the Government Digital Service (GDS). | ||
1. Sign into the GOV.UK PaaS admin tool for [London](https://admin.london.cloud.service.gov.uk/) or [Ireland](https://admin.cloud.service.gov.uk/). | ||
|
||
If you work at GDS, you can enable single sign-on for your account via the GOV.UK PaaS admin tool. | ||
1. Select __Set up Google/Microsoft single sign-on__ and then select __Activate Google/Microsoft single sign-on__. | ||
|
||
1. Once you have access to SSO and if your org is hosted in London, run the following in the command line: | ||
1. Get a URL to generate a temporary authentication code. If your org is hosted in [London](orgs_spaces_users.html#regions), run the following in the command line: | ||
|
||
``` | ||
cf login -a api.london.cloud.service.gov.uk --sso | ||
``` | ||
|
||
If your org is hosted in Ireland, run: | ||
If your org is hosted in [Ireland](orgs_spaces_users.html#regions), run: | ||
|
||
``` | ||
cf login -a api.cloud.service.gov.uk --sso | ||
``` | ||
|
||
This will give you a URL where you can generate a temporary authentication code. | ||
1. Go to the URL and select __Continue__ under either __Google__ or __Microsoft__. | ||
|
||
1. Go to the URL and select the __Sign in using the GOV.UK PaaS internal account login__ button. | ||
1. On the __Sign in__ page, enter or select your email address. | ||
|
||
1. On the __Sign in with Google__ page, select your `@digital.cabinet-office.gov.uk` email address. | ||
1. Enter your password and, if applicable, the 2-step verification code to generate a temporary authentication code. | ||
|
||
1. Copy the temporary authentication code into the command line. | ||
1. Copy the generated temporary authentication code into the command line. | ||
|
||
When you have signed in, you will see code similar to the following: | ||
|
||
``` | ||
API endpoint: https://api.london.cloud.service.gov.uk (API version: 2.136.0) | ||
User: [email protected] | ||
Org: hmrc-prod | ||
Space: sandbox | ||
|
||
``` | ||
|
||
When you have signed in, run `cf` in the command line to see all available commands. | ||
|
||
## Deploy a test static HTML page | ||
|
||
|
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this actually true? @tlwr?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This used to be the case for Google
For Microsoft I do not think it is the case
I assume Google will no longer be the case after we enable it for everyone
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That's my understanding too. A bit confusing to have people use accounts with different emails, but I think it will be possible.
Maybe it's better to have this sentence in the docs, even if it's not technically true?