Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow to require eID login #456

Open
edmundlaugasson opened this issue May 14, 2021 · 2 comments
Open

allow to require eID login #456

edmundlaugasson opened this issue May 14, 2021 · 2 comments

Comments

@edmundlaugasson
Copy link

Is your feature request related to a problem? Please describe.
Currently there is not possible to identify real person behind the EU ID. Anyone can create fake email and go to https://ecas.ec.europa.eu/cas/ and create a fake account, activate it via fake email and voila - fake identity has been created. Therefore it is not possible to identify the real person behind the identity, which makes survey unreliable.

Describe the solution you'd like
This could be solved, when to allow require eID login for EUSurvey. This in turn requires in first place to connect EU Login with eID, then it would be possible to participate in such survey, which is the intended behaviour to avoid fraud with fake account.

Here is the design idea, how it could look like:
eu-survey-security-design-idea

This means, that each identity could be required independently and, or together with others.

Describe alternatives you've considered
There are no alternatives at the moment.

Additional context
Today we can connect EU Login with eID via such dialog:
eID-login

@edmundlaugasson
Copy link
Author

edmundlaugasson commented May 14, 2021

In addition I would propose to solve it so, that person can set up EU Login to require eID with login. Then it could be easier to require just eID with survey via EU Login. The idea is to just add the eID choice to that menu. When choosing eID, there will be checked, whether the used account has connected with eID and if it is, the login will continue with eID and later EUSurvey can detect, that user has authenticated via eID and is suitable to respond to such survey, where eID was required. Also any other website, that is using EU Login.
eu-survey-security-design-idea2

@BRU-EUSurvey
Copy link
Collaborator

Thank you.
We have passed your request to the EU Login team.
If/when they implement this new login option, then we will adapt EUSurvey accordingly.
Please note that the best is to contact the EU Login team directly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants