Following the reading of documents " ESPReSSO: Establishing Suggested Practices Regarding Single Sign-On", below some observations:
* The login page provided by the IDP should contain information about who it is needed to contact in case of authentication problems. In the document we
have found no mention of this aspect;
* The Menu Page Institution lists all the SPs that are available to the organization. This is a sort of list of links to various publishers,
journals, e-books, etc. ... In general, a page that collects all available SP organization, may also collect other user information such as:
** the service provider,
** If possible, who can use the service (in the case of academics, whether the service is aimed at students or staff, or teachers, etc. ...)
* In the document we have found no mention of error messaging (e.g. in case the user enters the wrong username or pwd, the error message should be
different from the case of a user entering the right credentials but having no authorization to access the service). |
