SURFContext OAuth [REPLACEMENT ISSUE]

[Brend-Smits]

The original issue

Id: 4
Title: SURFContext OAuth

could not be created.
This is a dummy issue, replacing the original one. It contains everything but the original issue description. In case the gitlab repository is still existing, visit the following link to show the original issue:

TODO

[Brend-Smits]

In GitLab by @miekassu on Mar 10, 2020, 06:51

changed the description

[Brend-Smits]

In GitLab by @miekassu on Mar 10, 2020, 06:53

Following email send to Jan Oonks on Monday 9th

Hey,

I'm representing DeX- project group and we are interested to implement SURFContext to our upcoming platform.

We know that you have SURF login in SQLSchool, could you provide information to us of how what steps you took to implemented SURFContext, all tips and tricks are appreciated. 
Also, we would like to hear how the implementation process went, what we should take into considerations, etc.

What is DeX?

Delta team of the Fontys University of Applied Science is working towards smart and innovative ICT solutions, Digital Excellence Platform (DeX).
The goal is to create a platform that allows students and employees to find existing projects from sources, such as  Github, Gitlab FHICT, HBO Kennisbank, and Canvas.


I’m looking forward to hearing from you.

Next actions will be taken after getting some reply.

[Brend-Smits]

In GitLab by @Brend-Smits on Mar 24, 2020, 14:30

moved from dex-backend#41

[Brend-Smits]

In GitLab by @miekassu on Mar 25, 2020, 02:29

New email send to Jan, hopefully answer this time.
If not I will start contacting Marcel Narings.

[Brend-Smits]

In GitLab by @miekassu on Mar 28, 2020, 05:48

Reply 25th March

Hi Kasper,
 
Sorry for the slow response. In honesty I forgot to reply your mail with all the Corona hectic and switch to online lessons.
 
I think three things have to be done:
1. setup something at Surf
https://www.surf.nl/dienstverlening-support/diensten-afnemen-van-surfnet
https://www.surf.nl/surfdashboard-alle-surfnet-diensten-in-1-overzicht
 
2. implement Open ID Connect (an PHP example can be found here https://git.fhict.nl/fontysapps/FHICT-OpenID-Sample which is also what I used with some tweaks and updates (it’s a bit dated) but I think it’s a good starting point. I think I had to update some libraries because of PHP major versions mandatory upgrades. When needed I could give you my tweaked variant of it.)
 
3. ask the other end (school) to connect with their representative for Surf (mostly someone within their organisation of the IT department) and connect to your service with the SurfDashboard I think. Maybe we also need to approve this request but really nobody seems to know.
 
In past years SQL School has been successfully connected to several other schools (Da Vinci, Haagse School, Summa College and all non-FHICT Fontys education).
I think it was from FHICT IT Department Marcel Narings or Stefan van Rooij (which isn’t employed anymore with us sadly) which helped me back then with procedure 3 for each of the schools. Stefan van Rooij was the architect and did all the initial setup stuff procedure 1.
 
But nobody seems to know the exact procedure 3. Currently Hogeschool van Amsterdam is pending for like half a year. I never received any email replies or status updates from FHICT aanvragen (it seems dead or a black hole) even after several attempts or other people from ISSD/FHICT IT Department. Hopefully you are more successfully than me. Let me know 😊
 
Maybe you could also contact Surf directly and check the above urls.
Would appreciate any progression updates from you.
 
Good luck and keep Corona free.
 
Greeting Jan Oonk

Next stept to contact Marcel Narings, as he represents Fontys with matter of SURF.

Task to be continued...

[Brend-Smits]

In GitLab by @miekassu on Apr 3, 2020, 02:10

Marcel Narings has answered 30th March

Hi Kasper,
 
If you use the FHICT API ( https://api.fhict.nl ) as the authentication source we can add SURFConnext  easily. It is already in use for this reason.
There are about 4 universities/schools connected. An external can request access by selecting “Fhict portal” in their dashboard.
Someone from the central IT department finaly has to accept the request.
 
Kind Regards,
Marcel

Discussion continue with reply.

Hey Marcel,

Thank you for the reply, this is good news for the team!

Currently we are using IdentityServer4 at our platform, but if I have understood right, we can add
FHICT Auth as external identity provider. I assume that is how SURFContext is added FHICT API now.

I think this will go more technical from now one and I need to bring more technical people to to this discussion.

Someone from the central IT department finaly has to accept the request.

Should we talk technical details with you or who we should contact next?

Thanks and stay safe,