Terms of Use: Review new user click through workflow to account for all use cases.

[kcondon]

Merce requested this ticket after a conference call with Masha regarding our application for SAML attributes from Harvard due to FERPA rules governing student privacy.

What was discussed was a click through acknowledgement by users that their names will be searchable if they agree to our terms of use.

A follow on discussion internally discussed how the shibboleth use case needed to be reviewed by general counsel for language in the terms of use and that most likely the implementation would involve a first time click through.

A point was brought up that in the past, often the first click through was done on behalf of the user by an admin setting up accounts. This led to a brief discussion how this was now addressed by the invitation model, followed by a recognition of at least one known use case of an admin needing/wanting to set up a batch of new users all at once (~200) by API and how the user would acknowledge the TOU in that case.

So, regarding batch and API in particular, need to have some trust aspect for creating accounts where the person creating accounts on behalf of others takes some measure of responsibility and then when the users first log in using the UI, they still must agree to the TOU. The API process needs to be automated since the earlier attempt at direct approval was cumbersome and a barrier to use.

[pdurbin]

a click through acknowledgement by users that their names will be searchable if they agree to our terms of use

See also #749.

[mheppler]

Static wireframe for Terms of Use page has been checked in. @pdurbin

[pdurbin]

Static wireframe for Terms of Use page has been checked in. @pdurbin

Great. Thanks. I'm also checking out the new mockups: https://iqssharvard.mybalsamiq.com/projects/updatedloginwithshibbolethii-dataverse40/grid

[eaquigley]

Based off discussion with Berkman Center, this is covered by having text about this in the Terms of Use and having users click two times on ToU page to acknowledge.