90 likes | 222 Views
Time Entry Security. Portal Login. User Logs in, user id, password System sends id,pw to SAML SAML authenticates If valid, SAML returns a valid SAML Artifact Artifact is passed from portal to application at startup. Portal Login. SAML. Client. Portal. Login. Login. UserName.
E N D
Portal Login • User Logs in, user id, password • System sends id,pw to SAML • SAML authenticates • If valid, SAML returns a valid SAML Artifact • Artifact is passed from portal to application at startup.
Portal Login SAML Client Portal Login Login UserName Password: Artifact Client Emplid Artifact Portal Channels Client Leave / Time Entry
Leave / Time Entry Save • Client stores Artifact from portal • Submits artifact and data on save requests • Web Services validate artifact, write audit, then perform operation
Leave / Time Entry Save Impersonating Lori Krug PBS -> Change to Chuck Miller Chuck Miller view Laura
Email (Audit) • To: Haller, Laura E. • You have Taken 8 hours Sick Leave Taken from 08/06/2009 at 08:00 to 08/06/2009 at 17:00. • Details: • Employee: Haller, Laura E. • Emplid: 155005 • Hours: 8 • Start: 08/06/2009 at 08:00 • End: 08/06/2009 at 17:00 • Earn Code: SCK • Type: Sick Leave Taken • Description: Cough • Comments: • SAML User: 186117, Kittredge, David • Portal User: 147011, Krug, Lori C • Selected User: 176379, Miller, Chuck • No Action required unless this is in error. Please go to https://my.cu.edu if you need to modify this. • ServerName: webtest1.cusys.edu/10.10.10.241
Email (Audit) select * from ps_leave_audit where emplid = '155005';
Leave / Time Entry Save SAML Web Service Client Artifact Extracts emplid from Artifact Save Leave / Time Entry Artifact, data Emplid or error Result Msg Write to database / audit Database Results
Submit Time • Employees to digitally sign timecards • Can we use same authentication?