You are viewing an old version of this page. View the current version.
Compare with Current
View Page History
« Previous
Version 4
Next »
Initial data/state:
- users with eid card
- application loaded / driver loaded
- In order to configure the TOTP-based application, we need to manage the digital keys in the CSAM portal. More information could be found here: https://iamapps.belgium.be/sma/generalinfo?language=en
- MOB-AuthCode installed on a mobile phone
TS dependencies:
Test Script ID | Test Actions | Assertion | Comment |
---|
ATH-TS-07 | Seq | Actor | Action | Automatic/Manual |
---|
1 | MAIN | starting an identification action | Automatic: could be automate but cannot be generic since the applications to test have all a different layout. | 2 | CSAM | authenticate himself with TOTP | Could be difficult to automate as CSAM and MAIN are different applications | 3 | MOB-AuthCode | get the security code and enter the key into CSAM portal (30 seconds lifespan) | Manual: to validate the authentication, the user must copy a security code found on his mobile application. | 4 | CSAM | choose a profile (any of them) | Could be difficult to automate as CSAM and MAIN are different applications |
| When the test actions are performed the following assertions must be checked
MAIN application: - user is logged into the application (MAIN)
eHealth endpoint: - IAM session is active (how to test: we don't have a token)
- IDP session is active (how to test: we don't have a token)
| As soon I cannot login into the app (the server has a login feature ???) |