Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions _includes/snippets/auth_content/aal_values.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,6 @@ Stricter behavior can be specified by adding one of:
- **`http://idmanagement.gov/ns/assurance/aal/2?hspd12=true`**
This specifies that a user has been authenticated with an HSPD12 credential (requires PIV/CAC). Users must _always_ authenticate with a second factor.
{% endcapture %}
<div markdown="1">

{{ aal_values | markdownify }}
</div>

3 changes: 1 addition & 2 deletions _includes/snippets/auth_content/deprecated_values.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,5 @@
- **`http://idmanagement.gov/ns/assurance/loa/3`**
Equivalent to `urn:acr.login.gov:verified`.
{% endcapture %}
<div markdown="1">

{{ deprecated_values | markdownify }}
</div>
3 changes: 1 addition & 2 deletions _includes/snippets/auth_content/service_levels.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,5 @@

Authentications for users who verify with facial matching will meet NIST 800-63-3 IAL2 standard. Authentication for users who do not do facial matching will not meet NIST 800-63-3 IAL2 standard.
{% endcapture %}
<div markdown="1">

{{ type_of_service | markdownify }}
</div>
4 changes: 2 additions & 2 deletions _pages/oidc/authorization.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,10 +23,10 @@ sidenav:

---
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}
{% capture service_levels %}
{% include snippets/auth_content/service_levels.md %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture deprecated_values %}
{% include snippets/auth_content/deprecated_values.md %}
Expand Down
6 changes: 3 additions & 3 deletions _pages/oidc/authorization/pkce.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,13 +23,13 @@ sidenav:

---
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}
{% capture service_levels %}
{% include snippets/auth_content/service_levels.md %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture deprecated_values %}
{% include snippets/auth_content/deprecated_values.md %}
{% include snippets/auth_content/deprecated_values.md %}
{% endcapture %}
{% capture code_challenge %}
Correct Example
Expand Down
22 changes: 22 additions & 0 deletions _pages/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,17 @@ sidenav:
href: "#user-flow"
- text: Service provider configuration
href: "#service-provider-configuration"
- text: Service levels
href: "#service-levels"
- text: Authentication assurance levels
href: "#authentication-assurance-levels"
---
{% capture type_of_service %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}

Login.gov is a FedRAMP moderate approved multifactor authentication and identity proofing platform that makes online interactions with the U.S. government simple, efficient and intuitive.

Expand All @@ -32,3 +42,15 @@ To configure a test application in the sandbox environment:
* Select between [OIDC]({{ site.baseurl }}/oidc/) or [SAML]({{ site.baseurl }}/saml/) protocol implementation protocols and understand which user attributes are required.
* If you have questions when testing your integration, read through our [FAQs]({{ site.baseurl }}/support/) or submit a ticket to our [technical support help desk]({{ site.baseurl}}/support/#contacting-partner-support).
* Before submitting a request to move your application's configuration to production, review the [User experience]({{ site.baseurl }}/design-guidelines/) page and the [Production]({{ site.baseurl }}/production/) page. Additional requirements, like a [signed Interagency agreement]({{ site.baseurl }}/production/#confirm-interagency-agreement-iaa) (IAA) and [agency logo]({{ site.baseurl }}/user-experience/agency-logo/), are described in these pages.

## Service Levels

Service Level, or Identity Assurance Level, determines what information is used to confirm a user's identity.

{{ type_of_service }}

## Authentication Assurance Levels

Authentication Assurance Level determines what second factors are allowed for user sign-in.

{{ aal_values }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why does {{ type_of_service }} exist in <div class="usa-prose" markdown="1"> but this doesn't? I think it should?