I5:FeatureTest-Selector Preserves MasterKey when Updating Non-Auditing Card

From OSIS Open Source Identity Systems

list help  copy  as XML  edit

Feature Test	Selector Preserves MasterKey when Updating Non-Auditing Card
Test Type	Card Usage
Identifier	FTR-iis-cardmgmt-5
Description	Tests that Selector retains the MasterKey and HashSalt when a card is overwritten by a new version of the card
Role tested	Information Card Identity Selector
Known Successful Reference Solution(s)	I5:CardSpace .NET Framework 3.5 SP1
Success Criteria	The card generates the same ClientPseudonym after being overwritten
Failure Criteria	ClientPseudonym changes after the card is overwritten

Features Proven

Feature	feature_type	solution_role
ClientPseudonym for Non-Auditing Managed Card remains the same after updating card to newer version in Selector	Information Card Identity Selector	interop

Instructions

1. Open the result page for your solution and for this test.
2. Import the "Echo Non-Auditing" card from the file File:I5 fedid cards.crds using the password "password", or if the selector doesn't support .crds files, from https://ipsts.federatedidentity.net/MgmtConsole/TestAccount.aspx?cardType=echoCard2.
3. Visit https://relyingparty.federatedidentity.net/CardSelectorRP/login.aspx and click the icon to submit a card. Select the "Echo Non-Auditing" card and preview the claims to be sent using the username "testclient" and password "testpassword".
   1. Record the PPID value being previewed (which should be 7EC-ZHHM-8V3).
4. Submit the card.
   1. Record the ClientPseudonym value displayed (which should be dOcmDC6vbrrbIC/lwCCxpI6RiVefHHukiAqpkD7jptA=).
5. Now visit the site https://ipsts.federatedidentity.net/MgmtConsole/TestAccount.aspx?cardType=echoCard7 and click the icon to install the "Non-auditing, (card version = 2)" Echo STS card.
   1. The selector should display a warning along the lines of "An older version of the same card exists. Importing will replace this card." This is OK. Proceed to import the card.
6. Visit https://relyingparty.federatedidentity.net/CardSelectorRP/login.aspx and click the icon to submit a card. Select the "Non-auditing v2" card and preview the claims to be sent using the username "testclient" and password "testpassword".
   1. Compare the PPID value being previewed to the value recorded earlier. It should be the same.
7. Submit the card.
   1. Compare the ClientPseudonym value displayed to the one you recorded earlier. It should be the same.
8. Set outcome:
   1. If the success criteria was met, set the outcome to "Works".
   2. If the test failed, set the outcome to "Failed" and enter information about the failure in the Notes section.
   3. If other issues occurred set the result to "Issues" and describe them in the Notes section.
9. Add either four tilde ~~~~ signs or a text name into the "Tested by" parameter.
10. Update the Date Tested, Browser, and Operating System lines of the results page.