Improve our testing capabilities

[MarliesRikken]

New Feature Request

• Better testIdP - with capability to easily impersonate different users with different admin rights.
• Seed users and apps to perform our user flow scenario's for each of our functionalities.

Summary

Currently testing SURF Access (TEST) with different admin roles is hard to do. This impedes proper testing.
We are missing a 'clean state' that testers can return to, to test different user flow scenario's.

Technical background: SURF Access (TEST) is connected to SURFconext (PRD) but checks authenticating entity against Manage (TEST) which does not contain the same entityID's as Manage (PRD).

Proposed Solution

• Create TEST IdP, exposed in SURFconext PRD
• Create TEST org_id in CRM PRD
• Assign SAB roles to CRM PRD org_id + profile
• Assign PRD CRM org_id to TEST IdP on Manage PRD
• Assign PRD CRM org_id to Manage TEST IdP entityID
• Have Access TEST request Manage TEST entityID by org_id

Developer Checklist

To be completed by the developer during implementation.

• Add required changes and feature flags config files
• Create and document database changes and migrations
• Create and document API changes and migrations
• check for backwards compatibility
• Updated CHANGELOG and other documentation where needed

Testing and QA

Describe how to verify and test this change.

Test Environment and Setup

1. Point to [URL/Branch]
2. Use account with [Role/Permissions]

Test Checklist

• Happy Path: Feature works as intended under normal conditions.
• Edge Case: [Describe specific test item]
• Validation: [Describe specific test item]
• UI/UX: Verified layout across screen sizes.

Extra Information

Add any other context, related issues, or technical notes here.

[MarliesRikken]

Okke overlegt met Martin over de issues met testing op dit moment en mogelijk oplossingsrichtingen.