diff --git a/docs/login_dot_gov.md b/docs/login_dot_gov.md index 5f985faa4..29b65d989 100644 --- a/docs/login_dot_gov.md +++ b/docs/login_dot_gov.md @@ -4,11 +4,11 @@ How to integrate with the login.gov sandbox: https://dashboard.int.identitysand 1. Create a team and a user over in the login.gov sandbox. 2. Create a test app: - a. you will need to create a unique client id that looks like: urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:test_notify_gov - b. Select OpenIdConnect and private key JWT - c. select authentication only - d. select MFA required + remember device 30 days only (AAL1) - e. set redirect urls like: http://localhost:6012/sign-in + - you will need to create a unique client id that looks like: urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:test_notify_gov + - Select OpenIdConnect and private key JWT + - select authentication only + - select MFA required + remember device 30 days only (AAL1) + - set redirect urls like: http://localhost:6012/sign-in 3. generate a cert: openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private.pem -out public.crt 4. Upload the public.crt to your app in the sandbox 5. put the private.pem contents and public.crt contents in github secrets (?)