Sprint 14 Goal

[hmitsch]

Prioritized Themes

1. RP Cutovers, Sprint 14 bit
2. Mozillians.org Q2 OKR Leftovers
3. Initiate work on SSO Dashboard Q3 Goal
4. SSH Federated Access (multi-sprint) SSH Federated access #169
5. Mozillians.org Infrastructure debt repayment
6. IAM Q3 OKR (Share a G Suite document with a Mozillians.org group): Crushing the Boulder (deprioritized stop starting and start finishing on the many other open ends we currently have)

Details

1. RP Cutover: Migration Plan
   • Group 3 (Cutover coordinated independently) RP Cutover to Auth0 SSO - Group 3 #133
   • Decom RPs that won't migrate RP Cutover - Verify and de-scope RP's targeted to be decommisioned #61
2. Mozillians.org Q2 OKR Leftovers
   • AWS metadata proxy Add AWS metadata proxy mozilla/parsys#217
   • Make Mozillians.org group updates just-in-time (already DONE?)
   • CIS Whitelist group: enroll more people
   • Bug 1391632 UI to invite users to groups can mislead users to add the wrong users
   • userinfo endpoint does not return userinfo endpoint does not return cis_functions#25
   • (from #iam) architecture review to clarify some of the future of the service from a docs perspective
   • (from #iam) I'd hate to have to have a FAQ "I can't login to taskcluster" "A: go to mozillians and set your t-shirt size. people without t-shirt sizes are prohibited"
   • (attn @LeoMcA) Make Discourse compatible with the 'cis_whitelist' group. Goal: Replace access to https://discourse.mozilla.org/c/iam/internal with Q2 OKR mechanics)
3. SSO Dashboard Q3 Goal: User alerts
   • SSO Dashboard: Implement low- and med-risk alert UI Implement low- and med-risk alert UI sso-dashboard#130 ("Your version of Firefox is out of date")
   • (bug) Fetch user full name from mozillians.org Fetch user full name from mozillians.org sso-dashboard#158
4. SSH Federated Access (multi-sprint) SSH Federated access #169
   • Finalize project documentation (https://mana.mozilla.org/wiki/display/SECURITY/Auth0+and+SSH)
   • POC Client-side
   • POC Server-side
   • POC IT Deploy with original groups
5. Mozillians.org Infrastructure Cleanup
   • Finish off CDN work
6. QA Engineering
   • Automate CIS tests - Verify that updates to a mozillians profile are visible in auth0 Automate CIS tests - Verify that updates to a mozillians profile are visible in auth0  #199
7. Other things
   • (optional) Fix Lock (library) upgrade issues Fix lock upgrade issues in dev auth0-deploy#143

For mental sanity: Other InfoSec Work

1. Accommodate Auth0 OIDC Conformant mode requirements Migrate RPs to OIDC Conformant mode #171
   • Create a list of RPs to decide next steps (test, coordinate with owners, switchover)
2. "Second Opinion" Design and build out of band authentication and authorization provider #79
   • Productionalize

For mental sanity: Other ParSys Work

1. CoSS Sprint 14 CoSS Sprint 14 Goal mozilla/coss#285
2. [Discourse] https://github.com/mozilla/discourse/milestone/3
3. Bug 138342 - OVH servers are down

Unplanned Scope

Note: please add any unplanned scope that you worked on here.

Out of Scope / Later Items

Themes which are not yet slated for delivery

• Q3 OKR Crushing the Boulder
  • Review and update Sprints 2017Q3 (Infosec) Sprints 2017Q3 (Infosec) #173
  • Solution architecture (data classification)
  • Stories (aka GitHub issues)
  • Pairing plan
• [ParSys] Kick off Kubernetes pilot project
• Mozillians.org Binary search: get it to DONE-DONE
• Pre-plan LDAP to CIS connector (publisher) @andrewkrug
• Now that we have Q2 OKR in PROD (defer until CIS Whitelist is removed):
  • Slack for Community access (next iteration of the current manual NDA Pilot)
  • TechSpeakers Discourse group
  • Reps Discourse group

• [Fix bug 1201027] Simplify Profile status UI [Fix bug 1201027] Simplify Profile status UI mozilla/mozillians#1436
• Groups grid UI enhancements Groups grid UI enhancements mozilla/mozillians#1426
• (Mentoring) Bug 847911 Create a view with all vouched mozillians
• (Mentoring) Bug 1333373 Redesign footer based on new brand identity
• Automated ServiceNow ticket creation for SSO Dashboard deployments
• Implement API Key Support on behalf of RPs
• WorkDay/CIS API-based integration
• Move AirMo to 'hosted Auth0 Lock'
• SSO Dashboard improvements
  • (bugfix) Run access-proxy in front of SSO dashboard (Run access-proxy in front of SSO dashboard sso-dashboard#107)
  • UX: user favorites Implement 'frequently used' section sso-dashboard#92 / frequently used SSO Dashboard Favorite Apps - UI Design #98
  • Fix SSO with ParSys properties
• [AUTH0 LOCK] Prototype new technology stack
  • Sign Up UI design Sign Up UI Design (v1) #67
  • Decide on technology stack for Front-end and AWS Lambda (backend)
  • Create backlog items
• Bug 1373894: Potential XSS in Mozillians.org

Logistics

• Consulted: Sprints 2017Q3 (Infosec) #173
• Out of Office: @hmitsch on vacation in week 21-25 AUG
• CoSS share: @comzeradd focus mostly on CoSS