Versions Compared

Old Version 31

changes.mady.by.user Kiran Kumar S

Saved on

compared with

New Version Current

changes.mady.by.user Kiran Kumar S

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

By the end of December 2024, all RDKM members will need to use SSO authentication to access these applications. This migration will introduce email-based authentication, meaning custom usernames will no longer be used. Instead, your email address used for registering RDKCentral RDK Central account will serve as your login identifier.

...

This improves user convenience and enhances security by reducing the number of passwords that need to be managed. SSO is commonly used in enterprise environments for secure application authentication


The SSO migration will take place in two phases:


Phase

...

1:

...

Initial Rollout for Wiki and Jira

  • Date: November 9
  • Details: Starting November 9, both Wiki and Jira will require SSO, meaning you’ll need to log in using your email address. 


Interim Period (November 9-29)
During this time, Gerrit, Artifactory, and Jenkins will still be accessible using the current custom username and password setup.


Phase 2: Full Migration for All Applications

  • Date: November 30
  • Details: Beginning November 30, we will expand SSO to Gerrit, Artifactory, and Jenkins, completing the migration for all RDKM applications. From this date onward, email-based authentication will be required to access all RDKM applications.

...

Phase-2:  Date:  23-Nov-2024

...

RDK Code

...

RDK Artifactory

...


For more info and queries, please refer the below FAQs.

...

Expand
title2. When are we supposed to set our password and MFA for SSO authentication in RDKM applications?

In phase Phase 1 , we will be migrating of the migration, only Jira and Wiki . So, post Nov will transition to SSO. Starting November 9th, if you wish to login to Jira and when you access Jira or Wiki, you will need to setup the Okta password and setup the MFA.'ll be required to set up an new password and enable MFA.

For other applications, including CMF, Jenkins, and Artifactory, you will still use your LDAP password until Phase 2, which is scheduled for completion by November 23rdBut you will have to continue using the LDAP password for logging in to CMF, Jenkins and Artifactory applications till Phase 2, ie till Nov 23rd.


Expand
title3. How will we come to know when we need to set the up our password and MFA in Okta?

Don't worry. We will send out a email to all our existing users post SSO migration with the link to setup the password and MFA in Okta. The No worries—we’ll notify all existing users! After the SSO migration, we will send an email with a link to set up your password and MFA. Detailed steps on how to complete the setup will be available in below queriesthe following questions.

Expand
title4. Is there any prerequisite setup or application required to setup the password and MFA in Okta?

Yes. You will just require a Authenticator app in your mobile phone, you’ll need an authenticator app on your mobile device. If you already have any authenticator apps an app like Microsoft Authenticator or Google Authenticator, then you can use them and it—there’s no need to install any other application specificallya new one. If you do not already have a Authenticator app in your phone, then you will need to install any of the common Authenticator apps like don’t have an authenticator app yet, simply download one of the commonly used options, such as Microsoft Authenticator or Google Authenticator, to get started.


Expand
title5. How to login existing RDK Central account user after SSO Migration
  • The current RDK Central user account has been onboarded at okta platform by the RDK Central admin. The user will receive an activation email with a link, which will expire in 7 days.

 

  • Click on Activate RDKM SSO Account. It will redirect to page to setup the password.

  • Click on setup to set your password as per the requirements.

  • Click on Next. It will redirect to setup security method for MFA.

  • Click on first option - Bring your own Authenticator App
  • Click on setup.

  • Scan the barcode and enter the code from the Authenticator app.

  • Once setup, click Continue


  • It will redirect to the login page. Click on Login.
  • Select Option as RDKM SSO.

Image Removed

  • Now you will be logged in to the wiki application.

Expand
title6. How to signup Wiki after SSO Migration


  • Click on Signup button. It will redirect to the CLA agreement page as below

  • Once clicked on proceed, we will receive a mail for activation.

 

  • Click on Activate RDKM SSO Account. It will redirect to page to setup the password.

  • Click on setup to set your password as per the requirements.

  • Click on Next. It will redirect to setup security method for MFA.

  • Click on first option - Bring your own Authenticator App
  • Click on setup.

  • Scan the barcode and enter the code from the Authenticator app.

  • Once setup, click Continue


  • It will redirect to the login page. Click on Login.
  • Select Option as RDKM SSO.

Image Removed

  • Now you will be logged in to the wiki application.

...

Expand
title7. How to reset your password via Okta

  • Reset the password as below following the password requirements

  • Once reset, you will be able to login to wiki.

  • You will receive a mail also stating that your password was reset.

...

Expand
title10. Is it mandatory to set MFA in Okta for existing users

Yes, It is mandatory to set MFA in Okta as we are migrating from the LDAP based login to Okta. Please follow the above queries on how to setup MFA in Okta.

 

Newly signed up users should create their LDAP password to access the below RDK LDAP Based Applications.
RDK Code
RDK Artifactory
RDK Jenkins
Click on https://wiki.rdkcentral.com/forgotuserpassword-ldap.action link and provide the RDK Central account details. 
 Image Removed
  • You should have received an email once click on "Send it to me" 
     Image Removed
    • You can find Reset Password link in your mail inbox. 
     Image Removed
    Once you click on link, You will be redirected to set new password. Set the new password and confirm password 
    If you don't find the Captcha, Please click on reload button next to Captcha, get loaded new Captcha. 
     Image Removed
    Once you click on reset, Your password will set successfully. 
     Image Removed
    You can use the newly set password for connecting the RDK Applications which are still running LDAP based authentication.
    RDK Code
    RDK Artifactory
    RDK Jenkins
    Expand
    title11. Reset password to connect RDK Central LDAP Based applications for New user
    .
    Expand
    title12. What if an existing user is not able to setup password and MFA within the activation mail expiry of 7 days?

    Don't worry. Just send a mail to support@rdkcentral.com and we will be sending out a new activation link to your email id.


    Expand
    title1312. What should be done if I lose access to the mobile phone where MFA is configured?

    Don't worry. Just send a mail to support@rdkcentral.com with the details and we will take care of it.

    Anchor
    Gerrit-SSO
    Gerrit-SSO
    Phase 2 - Migration Support

    Expand
    title1413. Is it Mandatory to set up Gerrit HTTP credentials ?

    Yes


    Expand
    title1514. How to setup Gerrit HTTP Credentials ?


    • Update netrc with new http credentials
      Code Block
      machine code.rdkcentral.com login usermail@company.com password HTTP_CREDENTIALS


    Expand
    title15. How to setup Artifactory API key
    • To Sync up your RDK Central SSO account ID in Artifactory. Please login to Artifactory portal.
    • Login to https://artifactory.rdkcentral.com
    • After logging in, click on the Profile name → Edit Profile at the right side top corner.
    • Image Added
    • Click on the gear icon here to generate a new API key
    • Once successfully generated , it would look like this.
    • Image Added
    • Update netrc with the new API key instead of old password
    • eg: machine artifactory.rdkcentral.com login useremail@company.com password API_KEY


    For any issues with SSO migration

    ...