Investigate using ORCID login in combination with Cognito to provide one-click authentication and profile pre-filling

[stevemayne]

Definition of done:

• Establish if there are any approval processes that need to be satisfied to use ORCID's Open ID Connect capability
• Work out what profile information can be read back from the service
• Ensure their OIDC implementation is compatible with Cognito

[bcd00]

Initial investigation.

Pros:

• Get user's name [3]
• Get user's email [3]
• Get user's organizations [3]
• OpenID Connect [6]
• OAuth [6]
• Cognito Compatible [1][2]
• Get organization location [3]
• Get user's keywords [3]

Cons:

• Each user can have multiple organizations [3]
• Keywords are free text [3]
• Doesn't include a research domain [3]
• No link between coai and individual organizations, would require a table of organizations and their disambiguated identifiers [3]
• Individual approval process [4]
• Specific branding guidelines [5]

References:

1. https://github.com/rochabr/amplify-orcid-integration
2. https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-oidc-idp.html
3. https://github.com/ORCID/orcid-model/blob/master/src/main/resources/record_3.0/samples/read_samples/record-full-3.0.json
4. https://info.orcid.org/documentation/integration-guide/getting-started-with-your-orcid-integration/
5. https://info.orcid.org/brand-guidelines/#h-orcid-logos-and-icons
6. https://info.orcid.org/documentation/api-tutorials/api-tutorial-get-and-authenticated-orcid-id/