...
- Users should have single-sign on (SSO) behavior in the browser among their Google and Synapse accounts. (As of Sprint 5, we have SSO with sagebase.org Google domain, but not general Google accounts.)
- We also need to support having users create accounts when they do not have a Google account. We also need to support creating separate account for R / API access to Synapse services.
- Users should not have to log-in until they do something that requires authentication. We want to encourage browsing public content as Anonymous.
User Logs
...
into Synapse with
...
...
Account
User Creates New Synapse Account
...