EPIC: Authentication Page

[DinuWije]

User Specifications & Requirements

• Client uses Outlook, and would prefer a connected authentication method
• Part time staff all currently use the same account to login, but have their own accounts they could use
• Regular and Admin staff should be able to log in from anywhere
• Relief staff should only be able to login from the site
  • Time-based restrictions won’t work since relief staff schedules are irregular
  • All relief staff use one desktop computer to login
• Admin accounts should be notified when other accounts login (Priority of feature TBD)
• Some sort of logging of sign on data is important (especially for relief staff)
• App should (potentially) be invite only

Work Breakdown

• Add outlook sign on to our Firebase Authentication options
  • Make sure we can track who the users are by their email and assign permissions accordingly
• Investigate inviting users
• Explore integrating Duo2FA into our application
  • Does Duo have a downloadable version that we can use to generate the code
  • How can we use DuoAPI to connect to our app
  • Does Duo integrate with firebase?
• Implement logging of sign in data