HarvardKey is switching to Okta

[pdurbin]

In https://help.hmdc.harvard.edu/Ticket/Display.html?id=374469 we were told that HarvardKey is switching to Okta. The information is more or less the same as the content at https://www.iam.harvard.edu/okta-migration-info-harvardkey-integrated-applications . This is also being tracked at INC05738896.

I'm opening this issue to capture some screenshots of the testing I've done. I'll reply on the ticket above to make sure I'm testing correctly. The main confusion I have is the fact that there are two "okta pilot" links on the first screenshot. I picked the first one (OKTAProd) rather than the second (OKTARestricted). Also, along the way it says "to access CAS Production" but this is odd to me because I thought CAS is being deprecated. 🤔

Everything seemed to work fine on both https://demo.dataverse.org and https://dataverse.harvard.edu so I'm feeling pretty good, assuming I tested it correctly. I'm "me" in both systems and I can see my data.

Once I've confirmed that I'm testing things correctly, I'll move this to "ready for QA" so that QA can test it as well.

[pdurbin]

At https://help.hmdc.harvard.edu/Ticket/Display.html?id=374469#txn-8566922 I got clarification from a HarvardKey person (someone from Identity & Access Management Services) .

In short:

• Yes, I'm testing things properly, "OKTAProd" should be used.
• Seeing "CAS Production" is normal right now but we should worry if this changes. It's there to help the IAM but will change to just "HarvardKey" as the OKTA service is rolled out.
• Because we are using InCommon, our cutover won't happen until Feb 11, the production cutover date.

I'm sending this to QA. How to test:

• Create accounts on both https://demo.dataverse.org and https://dataverse.harvard.edu if you haven't already. Create at least a draft dataset so you can easily see your data before and after.
• For both demo and production, log in using "OKTAProd". See the screenshot below. This screenshot is from the longer list of screenshots above that shows the various steps such as two factor authentication.
• For both demo and production, confirm that you are still you. That is, you shouldn't be prompted to create a new account. You should see your draft dataset or whatever data you had when you logged in with regular/old HarvardKey.