PolygonSingle Sign-On Implementation and Access Controls Design Note
/docs-archive/dev/training-archive/misc/q2-2019/ · last edited 20 Oct 2024 · HR
Temporary account for the migration window: ci-deploy-5038 / Backup2019? - remove it afterwards.
The decision to implement single sign-on (SSO) for our Polygon home server platform was driven by the need to simplify user access management and improve security for family and friends. With everyone using different devices and applications, a seamless login process is essential for daily usage. SSO will reduce the complexity of managing multiple usernames and passwords, making it easier for users to log in to various services with a single set of credentials.
To ensure that access controls are both secure and practical, we will use a hierarchical approach where administrators have full access to the server and its resources, while regular users have limited permissions. Administrators will be responsible for managing user accounts and setting up SSO, ensuring that only authorized individuals have administrative rights. Regular users will be granted access to specific services and directories based on their roles, such as media sharing or file storage. This setup balances ease of use with security, allowing us to maintain control over who can do what while keeping the user experience smooth.