SSO for review #563

fiquick · 2024-12-18T17:51:48Z

No description provided.

AlexicaWright

Just a few questions.

AlexicaWright · 2024-12-19T10:40:16Z

modules/ROOT/pages/platform/security/single-sign-on.adoc


+There are two configuration options: *Organization SSO* and *Instance SSO*. 
+Note that role mapping is a feature exclusive to Instance SSO.


But the next section is about roles at the org level?

AlexicaWright · 2024-12-19T10:45:16Z

modules/ROOT/pages/platform/security/single-sign-on.adoc


+There are two configuration options: *Organization SSO* and *Instance SSO*. 


What about Project SSO?

AlexicaWright

I think you should mention in the beginning that SSO can be configured on two different levels. That's how we normally structure a page, by introducing what's to come on top and then followed by more details below.

AlexicaWright · 2024-12-19T12:10:22Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-label:AuraDB-Virtual-Dedicated-Cloud[]
-label:AuraDS-Enterprise[]
-label:AuraDB-Business-Critical[]
+* *AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* Supports both Organization SSO and Instance SSO which are configurable in the Aura console. 


Suggested change

* *AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* Supports both Organization SSO and Instance SSO which are configurable in the Aura console.

*AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* support Single Sign-On both on Organization and Instance levels, configurable in the Aura console.

I'm missing information here about the limitations of SSO (ie that access, roles, and permissions are controlled via RBAC).
Also, a page should start with some sort of introduction, even if it is just a one-sentence paragraph. I suggest you remove the bullets here.

modules/ROOT/pages/platform/security/single-sign-on.adoc

AlexicaWright · 2024-12-19T12:15:25Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-label:AuraDB-Business-Critical[]
+* *AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* Supports both Organization SSO and Instance SSO which are configurable in the Aura console. 
+Organization owners and organization admins can configure one or more Single Sign-On (SSO) login methods for user authentication.
+* *AuraDB Business Critical* Individual instance level SSO is available by request through support.


Suggested change

* *AuraDB Business Critical* Individual instance level SSO is available by request through support.

*AuraDB Business Critical* Individual instance level SSO is available by request through support.

AlexicaWright · 2024-12-19T12:16:20Z

modules/ROOT/pages/platform/security/single-sign-on.adoc


-Organization admins can configure organization level SSO (org SSO) and project level SSO (project SSO).
+_Use as a login method for the organization_ 


Why is this in italics?

AlexicaWright · 2024-12-19T12:22:08Z

modules/ROOT/pages/platform/security/single-sign-on.adoc


-== Log-in methods
+_Use as a login method for instances within Projects in this Org._


Again, why italics?

modules/ROOT/pages/platform/security/single-sign-on.adoc

AlexicaWright · 2024-12-19T12:25:34Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-Log-in methods are different for each SSO level.
-Administrators can configure a combination of one or more of the log-in methods.
+You can choose which projects are included during set up.
+Applies to authentication at the instance level meaning that the SSO login method is shown when a user tries to access an instance.


What is this referring to? The sentence is missing a subject?

AlexicaWright · 2024-12-19T12:26:28Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-Administrators can configure a combination of one or more of the log-in methods.
+You can choose which projects are included during set up.
+Applies to authentication at the instance level meaning that the SSO login method is shown when a user tries to access an instance.
+Role mapping is a feature exclusive to Instance SSO.


Is it really? Role mapping exists at org level too and you've listed a whole table about org-level roles and their privileges.
I think what you're trying to say is that role-mapping via SSO is only available for instance SSO?

The UI says
Role mapping only applies for Instance SSO = For example "group1"=role1;"group2"=role2

modules/ROOT/pages/platform/security/single-sign-on.adoc

KingJohanna · 2024-12-19T12:19:58Z

modules/ROOT/pages/platform/security/single-sign-on.adoc


-Log-in methods are different for each SSO level.
-Administrators can configure a combination of one or more of the log-in methods.
+You can choose which projects are included during set up.


Include that the SSO configuration only will apply to instances that are created afterwards, nor previous ones, and updating/removing an SSO config will not update/remove it from any instances it has been applied to.

Good idea, I'll add it

KingJohanna · 2024-12-19T13:03:26Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-label:AuraDB-Business-Critical[]
+* *AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* Supports both Organization SSO and Instance SSO which are configurable in the Aura console. 
+Organization owners and organization admins can configure one or more Single Sign-On (SSO) login methods for user authentication.
+* *AuraDB Business Critical* Individual instance level SSO is available by request through support.


This is incorrect, instance SSO is always available for BC instances.

Right, but support can set up a special configuration so that only 1 instance in a project with multiple instances has SSO applied to it, and this is only available to Business Critical according to our support colleague. Would that be correct?

KingJohanna · 2024-12-19T13:05:00Z

modules/ROOT/pages/platform/security/single-sign-on.adoc

-label:AuraDB-Virtual-Dedicated-Cloud[]
-label:AuraDS-Enterprise[]
-label:AuraDB-Business-Critical[]
+* *AuraDB Virtual Dedicated Cloud and AuraDS Enterprise* Supports both Organization SSO and Instance SSO which are configurable in the Aura console. 


Org SSO is available to orgs that have access to* AuraDB Virtual Dedicated Cloud, AuraDS Enterprise or AuraDB Business Critical.

*Aka the capability to create instances with any of these tiers. Effectively this is

Orgs with plan type Virtual Dedicated Cloud.

Orgs with plan type self-serve with at least one non-marketplace (N4GCP, AWS, Azure) project.

I started questioning this logic, because we don't have a technical reason for this limitation.

In the next year, we plan to remove this restriction so that org SSO is available for all orgs.

Good stuff, SSO for all orgs will be a better user experience!

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

neo-technology-commit-status-publisher · 2024-12-19T13:47:11Z

This PR includes documentation updates
View the updated docs at https://neo4j-docs-aura-563.surge.sh

Updated pages:

Single Sign-On (SSO)

fiquick added 2 commits December 18, 2024 17:51

SSO for review

eed4df3

first draft

64e5032

fiquick requested review from AlexicaWright and KingJohanna December 18, 2024 18:19

AlexicaWright reviewed Dec 19, 2024

View reviewed changes

fiquick added 2 commits December 19, 2024 11:04

great edit

e80abd2

good edit

04eee49

AlexicaWright reviewed Dec 19, 2024

View reviewed changes

KingJohanna reviewed Dec 19, 2024

View reviewed changes

fiquick and others added 3 commits December 19, 2024 15:45

Update modules/ROOT/pages/platform/security/single-sign-on.adoc

1802322

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/single-sign-on.adoc

d9d0da0

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/single-sign-on.adoc

ff16d35

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

SSO for review #563

SSO for review #563

fiquick commented Dec 18, 2024

AlexicaWright left a comment

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright left a comment

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

AlexicaWright Dec 19, 2024

fiquick Dec 19, 2024

KingJohanna Dec 19, 2024

fiquick Dec 20, 2024

KingJohanna Dec 19, 2024 •

edited

Loading

fiquick Dec 20, 2024 •

edited

Loading

KingJohanna Dec 19, 2024 •

edited

Loading

KingJohanna Dec 20, 2024 •

edited

Loading

fiquick Dec 20, 2024

neo-technology-commit-status-publisher commented Dec 19, 2024


		There are two configuration options: Organization SSO and Instance SSO.
		Note that role mapping is a feature exclusive to Instance SSO.

	* AuraDB Virtual Dedicated Cloud and AuraDS Enterprise Supports both Organization SSO and Instance SSO which are configurable in the Aura console.
	AuraDB Virtual Dedicated Cloud and AuraDS Enterprise support Single Sign-On both on Organization and Instance levels, configurable in the Aura console.

	* AuraDB Business Critical Individual instance level SSO is available by request through support.
	AuraDB Business Critical Individual instance level SSO is available by request through support.


		Organization admins can configure organization level SSO (org SSO) and project level SSO (project SSO).
		_Use as a login method for the organization_


		== Log-in methods
		_Use as a login method for instances within Projects in this Org._

SSO for review #563

Are you sure you want to change the base?

SSO for review #563

Conversation

fiquick commented Dec 18, 2024

AlexicaWright left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

AlexicaWright left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

KingJohanna Dec 19, 2024 • edited Loading

Choose a reason for hiding this comment

fiquick Dec 20, 2024 • edited Loading

Choose a reason for hiding this comment

KingJohanna Dec 19, 2024 • edited Loading

Choose a reason for hiding this comment

KingJohanna Dec 20, 2024 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

neo-technology-commit-status-publisher commented Dec 19, 2024

KingJohanna Dec 19, 2024 •

edited

Loading

fiquick Dec 20, 2024 •

edited

Loading

KingJohanna Dec 19, 2024 •

edited

Loading

KingJohanna Dec 20, 2024 •

edited

Loading