work on logout

This commit is contained in:
Kenneth Kehl
2023-10-20 08:48:04 -07:00
parent 1d1e7747d0
commit 7ca258b547
4 changed files with 57 additions and 15 deletions

21
docs/login_dot_gov.md Normal file
View File

@@ -0,0 +1,21 @@
# Integrating with login.gov
How to integrate with the login.gov sandbox: https://dashboard.int.identitysandbox.gov
1. Create a team and a user over in the login.gov sandbox.
2. Create a test app:
a. you will need to create a unique client id that looks like: urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:test_notify_gov
b. Select OpenIdConnect and private key JWT
c. select authentication only
d. select MFA required + remember device 30 days only (AAL1)
3. generate a cert: openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private.pem -out public.crt
4. Upload the public.crt to your app in the sandbox
## Open Issues
1. The logout functionality is not working. The URL in sign_out.py does work by itself, but for some reason a
requests.post(url) fails.