Generating Electronic Signature with SSO Login
Since version 20.11-LTS Codebeamer is able to generate an electronic signature for users with SSO and default login too.
All features that need an electronic signature are using the same generation mechanism.
There is always a button that indicates the signature generation process. Here is a list of a few buttons:
• Generate Signature button.
• Regenerate Signature button.
• Start signature process button.
• Sign & (Approve/Reject) button.
A popup window opens after the button click to identify the current user with credentials. Depending on the user's login mechanism either an SSO identity provider's login screen or the default Codebeamer login screen will appear. (If the user is able to login with default credentials and SSO too, then the SSO login screen will appear).
Prerequisite
SAML
forceAuthn parameter must be supported.
A boolean value of "true" or "false" that indicates whether the request generated by the service provider should include an option to bypass an existing security context and require explicit user interaction during authenticaton to the identity provider.
OpenID
prompt parameter MUST be supported.
login The Authorization Server SHOULD prompt the End-User for reauthentication. If it cannot reauthenticate the End-User, it MUST return an error, typically login_required.
Default CB login screen
For not FDA-compliant industries (for example: automotive) it is acceptable that the username is prefilled in the login popup.
In that case, there is an application configuration option to enable to prefill the current user's username:
"signature" : {
"usernameRequired" : true (default) / false
},
An example SSO login screen
This screen is provided by your identity provider.