INFN wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Approvers and certifiers ======

==== Approvers ====

The approver is the contact indicated by the user, when requesting a certified identity (LoA2),
who will have to approve the request to access IT resources and / or economic ties.

The approver indicated by the user will receive an email similar to this:

{{ :cn:ccr:aai:doc:rid:mail-approvatore.png?400 |Mail approver}}

The approver, by connecting to the specified link and selecting "Back office", will be able to view all the requests awaiting for approval:

{{ :cn:ccr:aai:doc:rid:approvatore-1.png?400 |Approval list}}

By selecting the request and pressing the Accept or Reject button the request will approved or denied.

{{ :cn:ccr:aai:doc:rid:aprovatore-2.png?400 |Confirm approval}}

{{ :cn:ccr:aai:doc:rid:approvazione-accettata.png?400 |Request approved}}

The Approval action triggers two email messages: 

One to the user notifying the authorization was granted by the approver and then he will be contacted by the office in charge of digital identity certification:
{{ :cn:ccr:aai:doc:rid:mail-3.png?400 |Mail to user}}

The other one to the group of certifiers defined in the structure.

==== Certifiers ====
There is a group of certifiers, designated by the Director of each INFN unit, in charge of the verification of new identities.

All certifiers receive an email like this: 

{{ :cn:ccr:aai:doc:rid:istruzioni:userportal:certificatori-primo-mail.png?400 |Mail to certifiers}}


The certifier who decides to take charge of the operation must:
  - access \\ [[https://userportal.app.infn.it/back-office/verify|userportal]] \\ and take charge of the certification (click on the appropriate button)
  - contact the user via e-mail  \\ (user e-mail address is specified in the message sent to all certifiers)


{{ :cn:ccr:aai:doc:rid:istruzioni:userportal:certificatori-prendi-in-carico.png?400 |Take in charge}}

To start the verification process click on the "verify" button in the table corresponding to the user to be verified. 

{{ :cn:ccr:aai:doc:rid:istruzioni:userportal:certificatori-verifica.png?400 |Verify-1}}

You can choose whether to proceed with the verification of the identity or whether to reject the request

{{ :cn:ccr:aai:doc:rid:istruzioni:userportal:verifica-rifiuta-eng.png?400 | Verify or Reject}}

If you reject, a confirmation window will appear.

If you refuse, a confirmation window will appear a new window will appear where you can edit user's personal data.  
{{ :cn:ccr:aai:doc:rid:verifica-2.png?400 |Verify-2}}

Select the desired verification method from

   * Identification document
   * Direct knowledge

and click on the Verify button. 

{{ :cn:ccr:aai:doc:rid:verifica-3.png?400 |Verify-3}}

A confirmation window will appear. 

{{ :cn:ccr:aai:doc:rid:verifica-4.png?400 |Verify-4}}

The verification process will be completed by clicking on the "Verify" button.

{{ :cn:ccr:aai:doc:rid:verifica-5.png?400 |Verify-5}}

The user will receive an email notification at the end of the process.

{{ :cn:ccr:aai:doc:rid:mail-4.png?400 |Certification e-mail}}