Revision 8f5a3a06 docs/source/devguide.rst

b/docs/source/devguide.rst
9 9 
Users in astakos can be authenticated via several identity providers:
10 10 

  		





  11
  11
  
    
* Local


  		





  12
  
  
    
* Twitter


  		





  13
  12
  
    
* Shibboleth


  		





  14
  13
  
    

  		





  15
  14
  
    
It provides also a command line tool for managing user accounts.


  		





  ......




  51
  50
  
    
Invited user


  		





  52
  51
  
    
^^^^^^^^^^^^


  		





  53
  52
  
    

  		





  54
  
  
    
A registered ~okeanos user, invites student Alice to subscribe to ~okeanos services. Alice receives an email and through a link is navigated to Astakos's signup page. The system prompts her to select one of the available authentication mechanisms (Shibboleth, Twitter or local authentication) in order to register to the system. Alice already has a Shibboleth account so chooses that and then she is redirected to her institution's login page. Upon successful login, her account is created.


  		





  
  53
  
    
A registered ~okeanos user, invites student Alice to subscribe to ~okeanos services. Alice receives an email and through a link is navigated to Astakos's signup page. The system prompts her to select one of the available authentication mechanisms (Shibboleth or local authentication) in order to register to the system. Alice already has a Shibboleth account so chooses that and then she is redirected to her institution's login page. Upon successful login, her account is created.


  		





  55
  54
  
    

  		





  56
  55
  
    
Since she is invited his account is automaticaly activated and she is redirected to Astakos's login page. As this is the first time Alice has accessed the system she is redirected to her profile page where she can edit or provide more information.


  		





  57
  56
  
    

  		





  58
  57
  
    
Not invited user


  		





  59
  58
  
    
^^^^^^^^^^^^^^^^


  		





  60
  59
  
    

  		





  61
  
  
    
Tony while browsing in the internet finds out about ~okeanos services. He visits the signup page and since his has already a twitter account selects the twitter authentication mechanism and he is redirected to twitter login page where he is promted to provide his credentials. Upon successful login, twitter redirects him back to the Astakos and the account is created.


  		





  
  60
  
    
Tony while browsing in the internet finds out about ~okeanos services. He visits the signup page and since his has not a shibboleth account selects the local authentication mechanism. Upon successful signup the account is created.


  		





  62
  61
  
    

  		





  63
  62
  
    
Since his not an invited user his account has to be activated from an administrator first, in order to be able to login. Upon the account's activation he receives an email and through a link he is redirected to the login page.


  		





  64
  63
  
    

  		





  ......




  99
  98
  
    
* access and edit their profile via: ``/im/profile``.


  		





  100
  99
  
    
* change their password via: ``/im/password``


  		





  101
  100
  
    
* invite somebody else via: ``/im/invite``


  		





  102
  
  
    
* send feedback for grnet services via: ``/im/send_feedback``


  		





  
  101
  
    
* send feedback for grnet services via: ``/im/feedback``


  		





  103
  102
  
    
* logout (and delete cookie) via: ``/im/logout``


  		





  104
  103
  
    

  		





  105
  104
  
    
User entries can also be modified/added via the ``snf-manage activateuser`` command.


  		












Also available in:
  Unified diff