92cc41d26d
- Add Legal Office of the Master seal (SVG design with Maltese Cross, scales of justice, legal scroll) - Create legal-office-manifest-template.json for Legal Office credentials - Update SEAL_MAPPING.md and DESIGN_GUIDE.md with Legal Office seal documentation - Complete Azure CDN infrastructure deployment: - Resource group, storage account, and container created - 17 PNG seal files uploaded to Azure Blob Storage - All manifest templates updated with Azure URLs - Configuration files generated (azure-cdn-config.env) - Add comprehensive Azure CDN setup scripts and documentation - Fix manifest URL generation to prevent double slashes - Verify all seals accessible via HTTPS
4.8 KiB
Entra VerifiedID Integration - Next Steps Summary
This document provides a high-level overview of all next steps required to complete the Entra VerifiedID integration for eCredential issuance.
Quick Start
For automated setup, run:
./scripts/deploy/setup-entra-automated.sh
For detailed manual steps, see: ENTRA_VERIFIEDID_DEPLOYMENT_CHECKLIST.md
Task Categories
🔵 Azure Configuration (8 tasks)
- Create Azure AD App Registration
- Configure API Permissions
- Create Client Secret
- Enable Verified ID Service
- Create Default Credential Manifest
- Create Diplomatic Credential Manifest (optional)
- Create Judicial Credential Manifest (optional)
- Create Financial Credential Manifest (optional)
Estimated Time: 2-4 hours Dependencies: Azure subscription access
🟢 Environment Configuration (6 tasks)
- Run Automated Setup Script (or manual secret storage)
- Store Secrets in Azure Key Vault
- Configure Development Environment
- Configure Staging Environment
- Configure Production Environment
- Configure Multi-Manifest Support (if using multiple manifests)
- Configure Rate Limits
Estimated Time: 1-2 hours Dependencies: Azure configuration complete
🟡 Testing (8 tasks)
- Run Unit Tests
- Run Integration Tests
- Test Credential Issuance
- Test Credential Verification
- Test Webhook Endpoint
- Test Status Endpoint
- Test Retry Logic
- Test Rate Limiting
- Test Multi-Manifest Support
- Test eIDAS Bridge
Estimated Time: 2-3 hours Dependencies: Environment configuration complete
🟠 Deployment (4 tasks)
- Deploy to Staging
- Configure Webhook URL in Staging
- Verify Staging Integration
- Deploy to Production
- Configure Webhook URL in Production
- Verify Production Integration
Estimated Time: 2-3 hours Dependencies: Testing complete
🔴 Monitoring Setup (3 tasks)
- Set Up Prometheus Scraping
- Create Grafana Dashboard
- Set Up Alerts
Estimated Time: 1-2 hours Dependencies: Deployment complete
🟣 Documentation (3 tasks)
- Update Deployment Documentation
- Create Operational Runbook
- Document Troubleshooting Guide
- Train Team
Estimated Time: 2-3 hours Dependencies: None (can be done in parallel)
Total Estimated Time
- Minimum (automated setup, single manifest): 8-12 hours
- Recommended (automated setup, multiple manifests): 10-15 hours
- Comprehensive (manual setup, full testing, monitoring): 12-18 hours
Critical Path
The critical path for deployment is:
- Azure Configuration → 2. Environment Configuration → 3. Testing → 4. Staging Deployment → 5. Production Deployment
Monitoring and Documentation can be done in parallel.
Priority Tasks
Must Complete Before Production:
- ✅ Azure App Registration and API Permissions
- ✅ Client Secret Creation
- ✅ At least one Credential Manifest
- ✅ Environment Configuration
- ✅ Basic Testing (issuance and verification)
- ✅ Staging Deployment and Verification
Should Complete Before Production:
- ✅ Webhook Configuration
- ✅ Monitoring Setup
- ✅ Rate Limit Configuration
- ✅ Integration Testing
Can Complete After Production:
- ⏳ Additional Credential Manifests
- ⏳ Advanced Monitoring Dashboards
- ⏳ Comprehensive Documentation
- ⏳ Team Training
Resources
Documentation
- Deployment Checklist: ENTRA_VERIFIEDID_DEPLOYMENT_CHECKLIST.md
- Operational Runbook: ../operations/ENTRA_VERIFIEDID_RUNBOOK.md
- Integration Guide: ../integrations/MICROSOFT_ENTRA_VERIFIEDID.md
Scripts
- Automated Setup:
./scripts/deploy/setup-entra-automated.sh - Store Secrets:
./scripts/deploy/store-entra-secrets.sh
External Resources
Getting Help
If you encounter issues:
- Check the Troubleshooting Guide
- Review logs:
kubectl logs -n the-order-prod deployment/identity-service - Check metrics:
curl https://api.theorder.org/metrics | grep entra - Consult the Operational Runbook
- Contact Azure Support for Entra-specific issues
Status Tracking
Track your progress using the TODO list in your project management tool or the checklist in ENTRA_VERIFIEDID_DEPLOYMENT_CHECKLIST.md.
Last Updated: [Current Date] Next Review: After staging deployment