Use SSO options for roadmaps as authorized users
For internal roadmaps, allow option to choose SSO option as authorization to view roadmap.
OR
When a site is restricted, the public roadmap that we share with users is also ideally "restricted" to only SSO users.
-
Sam Pavitt commented
We use JSON web Tokens to SSO users in straight from our application, those same users need to be able to see the roadmap linked from our application but we do not want it to be a public link.
Please simply inherit the authentication model of the Idea's Forum.
As an authorized user,
I want to access internal roadmaps using SSO authentication,
So that roadmaps remain restricted and are not publicly accessible.Acceptance Criteria:
SSO Authentication: Users must be authenticated via SSO (e.g., JSON Web Tokens) to access internal roadmaps.
Authorization Inheritance: Roadmaps should inherit the same authentication model as the Ideas Forum.
Restricted Access: If the site is restricted, the public roadmap should also be restricted to only SSO-authenticated users.
Seamless User Experience: Users accessing the roadmap from within the application should not need to log in again if they are already authenticated.
Security Compliance: No public links should be available for restricted roadmaps to prevent unauthorized access.
Additional Notes:
This ensures that internal roadmaps remain accessible only to verified users without exposing them publicly.
Aligns with existing authentication mechanisms to maintain consistency across the platform.