Notes

Requirement ID,Document,Category,Parent Requirement(s),Requirement Statement,Verification Method,Implementation Responsibility,Verification Responsibility
SYRB-SSO-001,SyRB,Functional,,"The system shall provide Single Sign-On (SSO) capability that enables authorized users to authenticate once and access integrated applications without repeated authentication using OpenID Connect (OIDC) and OAuth 2.0 protocols.","Test; Demonstration","Development Team","V&V Team"
SYRB-SSO-002,SyRB,Functional,,"The system shall use OpenID Connect (OIDC) for authentication and OAuth 2.0 for authorization of human users and client applications.","Test","Development Team","V&V Team"
SYRB-SSO-003,SyRB,Functional,,"The system shall issue token-based credentials to authorized client applications to enable access to protected resources without exposing user credentials to the client application.","Test; Inspection","Development Team","V&V Team"
SYRB-SSO-004,SyRB,Security,,"The system shall enforce token expiration and prevent the use of expired credentials for authentication or authorization.","Test","Development Team","V&V Team"
SYRB-RBAC-001,SyRB,RBAC,,"The system shall restrict access to system functions based on assigned user roles.","Test","Development Team","V&V Team"
SYRB-RBAC-002,SyRB,RBAC,,"The system shall support centralized management of user roles through the enterprise Active Directory Identity Provider.","Test","Development Team","V&V Team"
SYRB-RBAC-003,SyRB,RBAC,,"The system shall enforce the principle of least privilege by granting users only the permissions required to perform their authorized duties.","Test; Analysis","Development Team","V&V Team"
SYRB-RBAC-004,SyRB,RBAC,,"The system shall support role-based authorization for both interactive users and non-interactive client applications.","Test","Development Team","V&V Team"
SYRB-CON-001,SyRB,Constraint,,"The system shall integrate with the organization's approved Identity Provider infrastructure.","Inspection","Development Team","V&V Team"
SYRB-CON-002,SyRB,Constraint,,"The system shall implement authentication and authorization using OAuth 2.0 and OpenID Connect standards.","Inspection; Test","Development Team","V&V Team"
SYRB-CON-003,SyRB,Constraint,,"The system shall support operation within the organization's existing HTTPS-based network infrastructure.","Inspection","Development Team","V&V Team"
SYRB-CON-004,SyRB,Constraint,,"The system shall support web-browser-based access without requiring installation of proprietary client software.","Demonstration","Development Team","V&V Team"
SYRB-CON-005,SyRB,Constraint,,"The system shall support non-interactive access from command-line tools and automated applications.","Test","Development Team","V&V Team"
SYRB-CON-006,SyRB,Constraint,,"The system shall use the enterprise Microsoft Active Directory-based Identity Provider as the authoritative identity source for Single Sign-On (SSO) authentication and authorization services.","Inspection","Development Team","V&V Team"