The upcoming Interoperabilty Test Bed release shall integrate with EU Login, the European Commission's single sign-on and authentication service.
The next release of the Test Bed, release 1.7.0 planned for end of September 2019, will support integration with EU Login. This will be enabled for the shared instance operated by ISA² (https://www.itb.ec.europa.eu/itb) and will also be made available to other Commission-hosted instances.
Important: EU Login integration will be by default disabled for other on-site or development-purpose Test Bed instances.
The integration with EU Login, replacing the Test Bed's current username and password authentication, is driven by the following reasons:
- The Test Bed's overall security is enhanced by reusing the Commission-standard and robust EU Login solution.
- EU Login allows users to benefit from single sign-on (SSO) sessions, minimising the times needed to authenticate when using Commission services.
- Use of EU Login aligns the Test Bed with Commission guidelines for its provided web applications as set out by DG DIGIT.
What changes to expect?
The integration with EU Login will of course affect the experience of existing Test Bed users. All steps are however being taken to ensure that the change is smooth. The following information summarises key points current users should be aware of:
New welcome page
The current login page is removed in favour of a welcome page featuring a login button to authenticate the user via EU Login. This welcome page provides information on the switch to EU Login along with links to a simplified EU Login user guide and a step-by-step migration guide. This welcome page also provides shortcut links for additional actions the user may want to take before connecting.
Migrating an account shall be straightforward and driven by the user herself. To migrate an account:
- The user first visits the Test Bed's welcome page and clicks on a migration link.
- The user is redirected to authenticate on EU Login.
- The user then is prompted to provide her legacy account credentials.
- The legacy account is linked as a role for the user.
Most users migrating to EU Login will do so as a one-time step. However, two exceptional cases need additional consideration:
- One user using multiple (legacy) accounts: Such users can repeat the migration process to link multiple legacy accounts to their EU Login. These accounts are now considered as roles and, for a user having multiple, will be presented to her for selection after EU Login authentication.
- Multiple users using one (legacy) account: It will no longer be possible for multiple users to share a single functional account. In this case new roles will need to be assigned to users by administrators that can then be confirmed by each user herself via the Test Bed's welcome page.
Adding a new user becomes a two-step process:
- A community or organisation administrator assigns a role to a user by providing her email address (the email address linked to her EU Login profile).
- The user visits the Test Bed’s welcome page and selects to confirm the new role assignment.
Changes for users shall be limited to the above login and user management aspects. Work currently continues to prepare the Test Bed for EU Login integration and create the supporting documentation to ease the transition period. Visit our Joinup site and become a member to remain informed of further updates.