Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Single sign-on update #234

Merged
merged 2 commits into from
Jul 26, 2019
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
39 changes: 27 additions & 12 deletions source/documentation/getting_started/get_started.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,8 +34,6 @@ Refer to the Cloud Foundry documentation on [using the Cloud Foundry CLI with a

You can sign in to Cloud Foundry using either your [GOV.UK PaaS account information](get_started.html#get-an-account) or the single sign-on function.

Single sign-on is only available to users within the Government Digital Service (GDS)

### Use your GOV.UK PaaS account

The default method to sign in to Cloud Foundry is to use your [GOV.UK PaaS account](get_started.html#get-an-account) information.
Expand All @@ -58,33 +56,50 @@ The default method to sign in to Cloud Foundry is to use your [GOV.UK PaaS accou

When you have signed in, run `cf` in the command line to see all available commands.

### Use the single sign-on function
### Use single sign-on

You can sign in to Cloud Foundry using the single sign-on function.

Using single sign-on makes managing your security, joining and leaving processes simpler by reducing the number of passwords or accounts you have to manage.

You must have either a [Google](https://myaccount.google.com/intro) or [Microsoft](https://account.microsoft.com/account) email address to use single sign-on. The email address must be the same as the one you use to sign into your GOV.UK PaaS account.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The email address must be the same as the one you use to sign into your GOV.UK PaaS account.

Is this actually true? @tlwr?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This used to be the case for Google

For Microsoft I do not think it is the case

I assume Google will no longer be the case after we enable it for everyone

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's my understanding too. A bit confusing to have people use accounts with different emails, but I think it will be possible.

Maybe it's better to have this sentence in the docs, even if it's not technically true?


#### Enable single sign-on

Single sign-on is only available to users within the Government Digital Service (GDS).
1. Sign into the GOV.UK PaaS admin tool for [London](https://admin.london.cloud.service.gov.uk/) or [Ireland](https://admin.cloud.service.gov.uk/).

If you work at GDS, you can enable single sign-on for your account via the GOV.UK PaaS admin tool.
1. Select __Set up Google/Microsoft single sign-on__ and then select __Activate Google/Microsoft single sign-on__.

1. Once you have access to SSO and if your org is hosted in London, run the following in the command line:
1. Get a URL to generate a temporary authentication code. If your org is hosted in [London](orgs_spaces_users.html#regions), run the following in the command line:

```
cf login -a api.london.cloud.service.gov.uk --sso
```

If your org is hosted in Ireland, run:
If your org is hosted in [Ireland](orgs_spaces_users.html#regions), run:

```
cf login -a api.cloud.service.gov.uk --sso
```

This will give you a URL where you can generate a temporary authentication code.
1. Go to the URL and select __Continue__ under either __Google__ or __Microsoft__.

1. Go to the URL and select the __Sign in using the GOV.UK PaaS internal account login__ button.
1. On the __Sign in__ page, enter or select your email address.

1. On the __Sign in with Google__ page, select your `@digital.cabinet-office.gov.uk` email address.
1. Enter your password and, if applicable, the 2-step verification code to generate a temporary authentication code.

1. Copy the temporary authentication code into the command line.
1. Copy the generated temporary authentication code into the command line.

When you have signed in, you will see code similar to the following:

```
API endpoint: https://api.london.cloud.service.gov.uk (API version: 2.136.0)
User: [email protected]
Org: hmrc-prod
Space: sandbox

```

When you have signed in, run `cf` in the command line to see all available commands.

## Deploy a test static HTML page

Expand Down