Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions _includes/snippets/auth_content/aal_values.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,6 @@ Stricter behavior can be specified by adding one of:
- **`http://idmanagement.gov/ns/assurance/aal/2?hspd12=true`**
This specifies that a user has been authenticated with an HSPD12 credential (requires PIV/CAC). Users must _always_ authenticate with a second factor.
{% endcapture %}
<div markdown="1">

{{ aal_values | markdownify }}
</div>

3 changes: 1 addition & 2 deletions _includes/snippets/auth_content/deprecated_values.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,5 @@
- **`http://idmanagement.gov/ns/assurance/loa/3`**
Equivalent to `urn:acr.login.gov:verified`.
{% endcapture %}
<div markdown="1">

{{ deprecated_values | markdownify }}
</div>
3 changes: 1 addition & 2 deletions _includes/snippets/auth_content/service_levels.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,5 @@

Authentications for users who verify with facial matching will meet NIST 800-63-3 IAL2 standard. Authentication for users who do not do facial matching will not meet NIST 800-63-3 IAL2 standard.
{% endcapture %}
<div markdown="1">

{{ type_of_service | markdownify }}
</div>
4 changes: 2 additions & 2 deletions _pages/oidc/authorization.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,10 +23,10 @@ sidenav:

---
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}
{% capture service_levels %}
{% include snippets/auth_content/service_levels.md %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture deprecated_values %}
{% include snippets/auth_content/deprecated_values.md %}
Expand Down
6 changes: 3 additions & 3 deletions _pages/oidc/authorization/pkce.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,13 +23,13 @@ sidenav:

---
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}
{% capture service_levels %}
{% include snippets/auth_content/service_levels.md %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture deprecated_values %}
{% include snippets/auth_content/deprecated_values.md %}
{% include snippets/auth_content/deprecated_values.md %}
{% endcapture %}
{% capture code_challenge %}
Correct Example
Expand Down
24 changes: 24 additions & 0 deletions _pages/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,17 @@ sidenav:
href: "#user-flow"
- text: Service provider configuration
href: "#service-provider-configuration"
- text: Service Levels
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The other side nav titles are only 1st word capitalized thought out the dev docs. I'd like to keep that consistent so this should probably be changed. Authentication Assurance Levels should likely be changed too.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll update Service levels. AAL is a proper noun, so I think it should be capitalized.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nope, you were right, NIST uses lowercase for AAL

href: "#service-levels"
- text: Authentication Assurance Levels
href: "#authentication-assurance-levels"
---
{% capture type_of_service %}
{% include snippets/auth_content/service_levels.md %}
{% endcapture %}
{% capture aal_values %}
{% include snippets/auth_content/aal_values.md %}
{% endcapture %}

Login.gov is a FedRAMP moderate approved multifactor authentication and identity proofing platform that makes online interactions with the U.S. government simple, efficient and intuitive.

Expand All @@ -32,3 +42,17 @@ To configure a test application in the sandbox environment:
* Select between [OIDC]({{ site.baseurl }}/oidc/) or [SAML]({{ site.baseurl }}/saml/) protocol implementation protocols and understand which user attributes are required.
* If you have questions when testing your integration, read through our [FAQs]({{ site.baseurl }}/support/) or submit a ticket to our [technical support help desk]({{ site.baseurl}}/support/#contacting-partner-support).
* Before submitting a request to move your application's configuration to production, review the [User experience]({{ site.baseurl }}/design-guidelines/) page and the [Production]({{ site.baseurl }}/production/) page. Additional requirements, like a [signed Interagency agreement]({{ site.baseurl }}/production/#confirm-interagency-agreement-iaa) (IAA) and [agency logo]({{ site.baseurl }}/user-experience/agency-logo/), are described in these pages.

## Service Levels

Service Level, or Identity Assurance Level, determines what information is used to confirm a user's identity.

<div class="usa-prose" markdown="1">
{{ type_of_service }}
</div>

## Authentication Assurance Levels

Authentication Assurance Level determines what second factors are allowed for user sign-in.

{{ aal_values }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why does {{ type_of_service }} exist in <div class="usa-prose" markdown="1"> but this doesn't? I think it should?