Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API-41014 Fraud Identity Theft #509

Merged
merged 5 commits into from
Oct 11, 2024
Merged

API-41014 Fraud Identity Theft #509

merged 5 commits into from
Oct 11, 2024

Conversation

dmekala-va
Copy link
Contributor

This PR is to add the fraud identity theft check in saml-proxy to block any login via the SAML Proxy that is identified to have a Fraud Identity Flag returned from MPI/ICN.

Link to Jira: https://jira.devops.va.gov/browse/API-41014

@dmekala-va dmekala-va requested a review from a team as a code owner October 10, 2024 19:35
@dmekala-va dmekala-va marked this pull request as draft October 10, 2024 19:35
@dmekala-va dmekala-va marked this pull request as ready for review October 11, 2024 13:58
src/MpiUserClientConfig.js Outdated Show resolved Hide resolved
src/cli/index.js Outdated Show resolved Hide resolved
src/MpiUserClient.test.ts Show resolved Hide resolved
@johnmweisz
Copy link
Collaborator

johnmweisz commented Oct 11, 2024

can also update the config example with this setting added

Copy link
Collaborator

@crolarlibertyva crolarlibertyva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

{
  "level": "warn",
  "message": "Fradulent identity detected, blocking login.",
  "request_id": "565fec10-87fc-11ef-9e04-8fef16314a83",
  "service": "saml-proxy",
  "time": "2024-10-11T18:12:13.428Z"
}

mwise-va
mwise-va previously approved these changes Oct 11, 2024
src/rsa.json Outdated Show resolved Hide resolved
@dmekala-va dmekala-va merged commit 87a1511 into master Oct 11, 2024
3 checks passed
@mwise-va mwise-va deleted the API-41014-id-theft branch October 11, 2024 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants