Changes between Version 1 and Version 2 of LdapSupport

Timestamp:

Apr 13, 2014, 12:45:11 PM (10 years ago)

Author:

davea

Comment:

--

LdapSupport

@@ -2 +2 @@
 
 model
-   an account can optionally have an "external authorizer", described by
+   an account can optionally have an "external authorizer" (EA), described by
       authorizer type
          LDAP, OpenAuth
       authorizer URL
       authorizer account ID
+
+if user creates account using EA,
+    they shouldn't be aware of a separate BOINC account
+
+if an account has an EA, user can remove it
+    (after which they have to login with password)
+
+if an account doesn't have an EA, user can add it
+
+web login
+    login form has "log in with LDAP" link
+    handler:
+        authorize account w/ LDAP server
+        get back email, ID
+        if acct w/ that email exists
+            if authorizer info matches, OK
+            else show error
+                "a PROJECT account with that email address exists,
+                but isn't configured to log in with LDAP.
+                Please log in using email and PROJECT password."
+        else
+            create account
+        if
 
 database