Responsibilities
Interaction design
|
Visual design
|
Project management
|
People management
Red Hat’s external single sign-on (SSO) solution was built using the open source Identity and Access Management project Keycloak. My team contributed design and usability improvements upstream to Keycloak so all Keycloak users, not just Red Hat, could benefit.
All Red Hat products and services use this SSO solution, which allowed me to collaborate with engineering, marketing, executives, and the open source community.
Customers want to be able to log in to Red Hat apps with their company SSO (federated IdP) instead of having to create and manage accounts with Red Hat.
User account data was managed by two separate systems that need to be upgraded into a unified solution before federated IdP can be enabled.
Make the experience of becoming a Red Hat customer, signing in to Red Hat properties, and managing other users so seamless that customers don’t even think about it.
Short term:
Long term:
Consolidate the two log in pages and two different account management pages.
Use email address as the account identifier rather than user-generated logins. Customers will now have one account rather than one per login.
Update plaintext emails to match other company communication so customers feel confident that these are legitimate emails.
Enable federated IdP to use our customers’ LDAP for Red Hat user account management, reducing the need to manually manage user accounts as their employees are hired, change roles, or depart.
Require email validation and enforce stronger password requirements for improved data security.
Contribute improvements to Keycloak, the open source IAM project used for in-product account management, for alignment between the web and product user account experience.
Understand the use cases for both log in forms and all possible log in methods:
Customers that used their email address as the username for one of their accounts may not be able to access their other accounts.
Not requiring email verification created a security risk for customers wanting to use federated IdP.
Defined the development features for the project, wrote the corresponding design and dev stories, and ran sprint planning.
Worked with the Information Security team to ensure compliance with NIST password best practices defined by NIST.SP.800-63b Digital Identity Guidelines Authentication and Lifecycle Management and the Information Security Operating guidelines.
Formed a design team of 1 senior, 2 junior, and 1 intern designers.
Defined the design strategy and high-level user flows for the team and provided guidance, design input, and reviews for the junior designers.
Brought the SSO system in compliance with Red Hat’s Brand standards and the PatternFly design system.
