Fallback method for ID validation

[phavekes]

Creating a fallback methode for ID verification for users who cannot user their institute, Dutch Bank or eIDAS.

The code will also be e-mailed to the end user. And the code is 14 days valid.

https://www.figma.com/design/ZAZOaq0W6q1nyQJIDwXplH/eduID?node-id=2645-8052&node-type=frame&t=mlJDaOKPkuAtYto5-0

Servicedesk:

• Create new app in openconext-myconext-repo (servicedesk-gui)
• GHA, docker + ansible work @phavekes
• login for servicedesk users, new SP with member information from VOOT in the ARP
• List of allowed groups in config (Role management in Openconext-Invite)
• Lookup code and display user information
• Validation checkboxes
• Store information as new accountlink-type: servicedesk
• Add information on servicedesk-employee (name, schachome, eppn/subjectid, group)
• Show 403 (or 404) when user is not member of the correct role
• Logout

mijn:

• Extra option in verification flow
• Allow user to enter name and DOB
• Show code, instructions and link to location
• Show verification in progress ans option to display the code again. Remaining validity
• Display new validation type in personal information
• Update behaviour: Do a hard refresh on mijn.eduid.nl when the user clicks "show code". Check if there is still a code, if so, do what you always do (show code pop up). If not (the code disappeared from /me), just refresh personal information page. In that way, when the user has his browser open at the service desk, and he wants to see the result of the "code being verified", the website will show this. Instead of him having to do a manual refresh.
• Update URL behind the "Bekijk eduID Service Desk" to ......

login:

• Extra option in verification flow
• Show information and send (SSO) to mijn-enviroment

mobile api

• Mobile api should also be able to generate control code
• Mobile app should be able to retrieve the code (using me endpoint)

[Tyskai]

Design in process!

[Tyskai]

@phavekes I made an suggestion for the behaviour:

Update behaviour: Do a hard refresh on mijn.eduid.nl when the user clicks "show code" on the personal information page. Check if there is still a code, if so, do what you always do (show code pop up). If not (the code disappeared from /me), just refresh personal information page. In that way, when the user has his browser open at the service desk, and he wants to see the result of the "code being verified", the website will show this. Instead of him having to do a manual refresh.