Skip to content

Commit

Permalink
DTW-93 fix table issues (#144)
Browse files Browse the repository at this point in the history 
* Replaced HTML tables with markdown tables in the integration section. Replaced links in tables with partial links.

* Changed formatting on code parameters in the integration section to match with the styling in the identity section.

* Replaced HTML tables with markdown tables in the identity section. Replaced links in tables with partial links.

* Replaced HTML tables with markdown tables in the logging users out section.

* Replaced HTML tables with markdown tables in the before integrating section. Replaced links in tables with partial links where appropriate.

* Updated tables to include the language consistency changes (PR-148)

* Fixed partial links

* Some minor wording updates
  • Loading branch information
@elenaschwan
elenaschwan authored Jan 25, 2024
1 parent 9e67ad5 commit e3c75b7
Show file tree
Hide file tree
Showing 13 changed files with 188 additions and 703 deletions.
6 changes: 4 additions & 2 deletions source/accessibility-statement.html.md.erb
View file
Original file line number Diff line number Diff line change
Expand Up @@ -30,13 +30,13 @@ This website is fully compliant with the Web Content Accessibility Guidelines ve

### What to do if you cannot access parts of this website

If you need information on this website in a different format like accessible PDF, large print, easy read, audio recording or braille, [use the Support page to contact the GOV.UK One Login team](/support/#support) with details of your request.
If you need information on this website in a different format like accessible PDF, large print, easy read, audio recording or braille, [use the Support page to contact the GOV.UK One Login team][integrate.support] with details of your request.

We’ll aim to reply in 3 working days.

### Reporting accessibility problems with this website

We’re always looking to improve the accessibility of this website. If you find any problems not listed on this page or think we’re not meeting accessibility requirements, [use the Support page to contact the GOV.UK One Login team](/support/#support).
We’re always looking to improve the accessibility of this website. If you find any problems not listed on this page or think we’re not meeting accessibility requirements, [use the Support page to contact the GOV.UK One Login team][integrate.support].

### Enforcement procedure

Expand All @@ -55,3 +55,5 @@ This website is fully compliant with the Web Content Accessibility Guidelines ve
This statement was prepared on 07 October 2021.

This website was last tested in October 2021.

<%= partial "partials/links" %>
25 changes: 4 additions & 21 deletions source/before-integrating/choose-the-level-of-authentication.html.md.erb
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,27 +13,10 @@ GOV.UK One Login uses ['Vectors of Trust'](https://datatracker.ietf.org/doc/html

GOV.UK One Login currently supports the following authentication levels, also known as ‘levels of protection’ in GPG 44.

<table class="tg">
<thead>
<tr>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Levels of protection</span></th>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Vector value</span></th>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Description of the levels of protection</span></th>
</tr>
</thead>
<tbody>
<tr>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Low level of protection</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent"><code>Cl</code> (credential low)</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">This vector requires your users to have a username and password combination. </span><br><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">You should only use this option if your service does not hold personal information about your users, for example if your service is about booking in an MOT. <br>All services use <code>Cl.Cm</code> as the authentication level by default, unless you change your authentication level to <code>Cl</code>.<br></br>If you request <code>Cl</code>, you will not be able to request identity attributes.</span></td>
</tr>
<tr>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Medium level of protection</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent"><code>Cl.Cm</code> (credential medium)</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">This vector requires your users to have a username and password combination, as well as using two-factor authentication (2FA). GOV.UK One Login currently supports 2FA either through a one-time password sent through SMS, or an authenticator app.</span><br><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">All services use <code>Cl.Cm</code> as the authentication level by default, unless you change your authentication level to <code>Cl</code>. <br></br>If you need to request identity attributes, you must request <code>Cl.Cm</code>. </span></td>
</tr>
</tbody>
</table>
| Levels of protection | Vector value | Description of the levels of protection |
|----------------------------|-----------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Low level of protection | `Cl` (credential low) | This vector requires your users to have a username and password combination. <br>You should only use this option if your service does not hold personal information about your users, for example if your service is about booking in an MOT. <br>All services use `Cl.Cm` as the authentication level by default, unless you change your authentication level to `Cl`.<br><br>If you request `Cl`, you will not be able to request identity attributes. |
| Medium level of protection | `Cl.Cm` (credential medium) | This vector requires your users to have a username and password combination, as well as using two-factor authentication (2FA). GOV.UK One Login currently supports 2FA either through a one-time password sent through SMS, or an authenticator app.<br>All services use `Cl.Cm` as the authentication level by default, unless you change your authentication level to `Cl`. <br><br>If you need to request identity attributes, you must request `Cl.Cm`. |

You'll include your level of authentication in your request to the `/authorize` endpoint.

Expand Down
32 changes: 5 additions & 27 deletions source/before-integrating/choose-the-level-of-identity-confidence.html.md.erb
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,33 +13,11 @@ You may need different levels of identity confidence at different points in your

GOV.UK One Login uses [‘Vectors of Trust’](https://datatracker.ietf.org/doc/html/rfc8485). Your service can use Vectors of Trust to request the right level of identity confidence for your users to gain access to the relevant parts of your service. You’ll include your vector in the query string as part of the request to the `/authorize` endpoint you make when you integrate with Authorization Code Flow.

<table class="tg">
<thead>
<tr>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Levels of identity confidence</span></th>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Vector value</span></th>
<th class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Description of the levels of identity confidence</span></th>
</tr>
</thead>
<tbody>
<tr>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">No identity confidence</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">P0</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">By default, GOV.UK One Login will not return a level of identity confidence. </span></td>
</tr>
<tr>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Low identity confidence (not available in private beta)</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">P1</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">A basic level of identity confidence, which reduces your service’s risk of accepting impostors or fake identities with fabricated credentials, otherwise known as ‘synthetic identities’.</span></td>
</span></td>
</tr>
<tr>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">Medium identity confidence</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">P2</span></td>
<td class="tg-0pky"><span style="font-weight:400;font-style:normal;text-decoration:none;color:#000;background-color:transparent">A higher level of identity confidence to further reduce your service’s risk of accepting imposters or fake identities with fabricated credentials, otherwise known as ‘synthetic identities’. <br></br>To request a medium level of identity confidence (<code>P2</code>), you must have specified <code>Cl.Cm</code> (the medium level of authentication) when you chose the level of authentication for your service.</span></td>
</tr>
</tbody>
</table>
| Levels of identity confidence | Vector value | Description of the levels of identity confidence |
|---------------------------------------------------------|----------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| No identity confidence | `P0` | By default, GOV.UK One Login will not return a level of identity confidence. |
| Low identity confidence (not available in private beta) | `P1` | A basic level of identity confidence, which reduces your service’s risk of accepting impostors or fake identities with fabricated credentials, otherwise known as ‘synthetic identities’. |
| Medium identity confidence | `P2` | A higher level of identity confidence to further reduce your service’s risk of accepting imposters or fake identities with fabricated credentials, otherwise known as ‘synthetic identities’. <br><br>To request a medium level of identity confidence (`P2`), you must have specified `Cl.Cm` (the medium level of authentication) when you chose the level of authentication for your service. |

Now you’ve chosen your level of identity confidence, you can [generate a key pair][integrate.generate-key-pair].

Expand Down
Loading

0 comments on commit e3c75b7

Please sign in to comment.