Feature Wiki
Tabs
Login, Auth & Registration
Page Overview
[Hide]1 General
Coordinator and Tester
- Login, Auth & Registration
- Authority to Sign off on Conceptual Changes: PerPascalSeeland , mjansen
- Authority to Sign off on Code Changes: PerPascalSeeland , mjansen
- Authority to Curate Test Cases: PerPascalSeeland , mjansen
- Authority to (De-)Assign Authorities: PerPascalSeeland , mjansen (Databay AG)
- Tester: vimotion , ILIAS_LM (OpenID) , fschmid (Shibboleth), Alexander Grundkötter, Qualitus (SAML)
- Assignee for Security Reports: PerPascalSeeland
- Assignee for Security Issues: PerPascalSeeland
- Unit-specific Guidelines, Rules, and Regulations: LINK MISSING
Additional
Authentication
Roadmap
Short Term
Mid Term
- Split AuthType and Ordering into seperate fields. Currently there is the mixer of int and int_int, which make typing difficult.
Improve Architecture
- Introduce repository pattern
- Improve DI handling
- Factor business logic out of UI classes
Long Term
- Fix overall structure. There are several services dealing with diffent auth methods, but all also have dependent code inside the authentication service. This should be split up into decouple the code.
2 Projects
The following projects are planned or have been realised for these components:
NEW Projects
- …
Ongoing Projects
- …
Projects On-Hold
- …
Completed Projects
- …
3 Suggested Features
In the following list you can add a request for a new feature or pick-up an already suggested feature about that should be decided again. The lists after show existing suggestions and scheduled features of this component.
- …
SUGGESTED FOR 11
Not scheduled Yet
- 2-Factor-Authentication (2FA)
- Abandon Default Authentication Mode
- Abandon PR333 Stud.IP workaround
- Administrator notification after waste of last try to login
- Always show full name instead of login
- Assign Competence Profiles via LDAP Synchronization
- Autocomplete-attributes for Login and registration form
- Change password permission assignable to authentification method
- Check for an existing LDAP user in SAML Auth
- Complete ILIAS Installation as LTI Tool
- ECS Support for OpenID Connect
- Enter multiple Group DNs in automatic Role Assignments via LDAP
- Improve Session Ending
- Improvement of Mail-Domain Filter for Self-Registration
- Interface to SAP SLcM
- LDAP attribute sync via user bind
- Local Authentication for WebDAV
- logout countdown
- logout reminder
- missed logout screen
- New Captcha Implementation for Self-Registration
- No automatic log out / Users stay logged in
- OAuth1 and OAuth2
- Permanent Link to Pages Accessible from Login Page
- providing of nested select dropdown list as fields for registration Form
- Quick-SignUp-Page-Element
- Registration: Double-Opt-in with Account Approval
- reset the agreement to the terms of service for all user groups
- Restrict Login to Administrators for Maintenance
- Shibboleth Authentication: Customizable User Creation
- Shibboleth SAML Single Logout
- Split Authentiction Page into Overview and Settings
- Split Password Service Template Variable
- Streamlining and Improvement Authentications Login Page
- Support Userdefined Fields in Shibboleth Authentication
- Use LDAP as Data Source for Shibboleth Authentication
- User Management: Additional Column for External Accounts
- Using redis as an in Memory database for User Sessions
- Validated self-registration
- WebDAV/Shibboleth
Already Suggested
- 2-Factor-Authentication (2FA)
- Abandon Default Authentication Mode
- Abandon PR333 Stud.IP workaround
- Administrator notification after waste of last try to login
- Always show full name instead of login
- Assign Competence Profiles via LDAP Synchronization
- Autocomplete-attributes for Login and registration form
- Change password permission assignable to authentification method
- Check for an existing LDAP user in SAML Auth
- Complete ILIAS Installation as LTI Tool
- ECS Support for OpenID Connect
- Enter multiple Group DNs in automatic Role Assignments via LDAP
- Improve Session Ending
- Improvement of Mail-Domain Filter for Self-Registration
- Interface to SAP SLcM
- LDAP attribute sync via user bind
- Local Authentication for WebDAV
- logout countdown
- logout reminder
- missed logout screen
- New Captcha Implementation for Self-Registration
- No automatic log out / Users stay logged in
- OAuth1 and OAuth2
- Permanent Link to Pages Accessible from Login Page
- providing of nested select dropdown list as fields for registration Form
- Quick-SignUp-Page-Element
- Registration: Double-Opt-in with Account Approval
- reset the agreement to the terms of service for all user groups
- Restrict Login to Administrators for Maintenance
- Shibboleth Authentication: Customizable User Creation
- Shibboleth SAML Single Logout
- Split Authentiction Page into Overview and Settings
- Split Password Service Template Variable
- Streamlining and Improvement Authentications Login Page
- Support Userdefined Fields in Shibboleth Authentication
- Use LDAP as Data Source for Shibboleth Authentication
- User Management: Additional Column for External Accounts
- Using redis as an in Memory database for User Sessions
- Validated self-registration
- WebDAV/Shibboleth
4 Scheduled Features
The following features have been scheduled / published in ILIAS Release 11:
- …
The following features have been scheduled / published in ILIAS Release 10:
The following features have been scheduled / published in ILIAS Release 9:
The following features have been scheduled / published in ILIAS Release 8:
The following features have been scheduled / published in ILIAS Release 7:
The following features have been scheduled / published in ILIAS Release 6:
The following features have been scheduled / published in ILIAS Release 5.4:
The following features have been scheduled / published in ILIAS Release 5.3:
The following features have been scheduled / published in ILIAS Release 5.2:
The following features have been scheduled / published in ILIAS Release 5.1:
The following features have been developed and published in ILIAS Release 5.0:
The following features have been developed and published in ILIAS Release 4.4:
The following features have been developed and published in ILIAS Release 4.3:
- Automatic user name generation from first and last name (released as plugin)
- Registration Mails with Attachment
- Restriction of self-registration to specified mail domains (as an option)
The following features have been developed and published in ILIAS Release 4.2:
- Editable Login Screen: Allow the editing of the login screen using the ILIAS page editor.
- Extension of inactive account
- LDAP as data source: Combine external authentication methods (Radius, CAS) with LDAP for user data synchronization and role assignment.
The following features have been developed and published in ILIAS Release 4.1:
- Certificate-based Single-Sign On
- Open-ID support
- Registration with access codes
- Session ID revision: To prevent conflicts with other applications we will rename the ILIAS session ID.
The following features have been developed and published in ILIAS Release 4.0:
- Confirmation by E-Mail: New registration type that requires a e-mail confirmation to activate account
- Preventing Multiple Logins
- Session Handling: Configuring duration and number of sessions at the same time.
- WebDAV/Shibboleth: Support local login for Shibboleth users, so that they can use WebDAV. (Part 1)
5 Redundant, Outdated and Rejected Feature Requests
Requests that are outdated or redundant (already implemented in other requests)
- Abandon LogOut-Screen
- Ability for administrator to login as a user
- Ability of defining regular limitation and adding notes to userdefined Fields in Registration Form by user
- Assigning roles and objects to user when registering
- Automatically Assign Personal Starting Page by User Data
- Automatically Assign Roles More Flexibly to Self-Registrees
- Decline User Agreement
- Forced change of password and username on first login
- Forced entry of user data made obligatory afterwards
- Integrate user-defined data into registration notification for admin
- LDAP-Synchronization
- LDAP/Shibboleth
- Move Password Administration to Authentication and Registration
- Role assignment of local roles for OpenID Connect (OIDC) Authentication
- Update Login Name via LDAP
- Workshop: Shibboleth & NginX
Rejected Feature Requests
Last edited: 23. Oct 2024, 15:06, Gruber, Ann-Christin [acgruber]