QBIS Authentication

Abstract

The process of identifying a user’s identity in a system is called authentication. This process requires high security and a user-friendly interface, since the authentication system is often the first section of a service a user encounters. The scope of this project is to implement an independent authentication service for QBIS. QBIS is a project- and time-management product and owned by QLogic AB. A majority of the project consisted of researching what leading authentication systems were available on the market that fulfill QBIS’ requirements and selecting one to implement with QBIS’ systems. The project’s scope also included the implementation of a REST API including automated documentation for QBIS’ web services. The open source authentication project IdentityServer4 was selected and implemented. The implemented authentication service offers most functionalities that QBIS offers today. The product was not launched since it needs further development, but much of the structure and design was implemented. A REST API connected to QBIS’ web services was implemented alongside automated documentation on its methods. Consumers of the API are able to authenticate themselves with the new authentication system. There were many factors that went into the decision of which authentication service to implement including licensing, pricing, functionalities, maintenance and familiarity. The project in its entirety is the majority of the journey towards an independent authentication and authorization server with expansion of current features to be implemented.