Develop UI

[dolsysmith]

1. Home page which explains to users what ORCID is and why they should grant their institution permissions to their ORCID profile.
   • Include login button
   • Option to revoke privileges
2. Error page for SSO login failure
3. Landing page for users who decide not to grant institution permissions to their profile.
   • Consider additional language about the benefits of granting this access here.
4. Acknowledgement page that a user has successfully granted permissions to their ORCID profile.
   • Include information about how to revoke permissions grant to their ORCID profile.
5. Logout button

[dolsysmith]

ORCID integration requirements

• Use OAuth to authenticate ORCID iDs (Do not allow users search for or type in ORCID iDs.)
• Include an ORCID branded button or link on your site to initiate authentication of the iD.
• Present the OAuth authorization screen according to our guidelines
• Use HTTPS for your site’s redirect URIs and on ORCID API calls
• Accept and store all data returned in the token exchange together with the user’s data in your system
• Use appropriate scopes and request methods (e.g. POST calls to add new information and PUT calls to update existing information)
• Publicly display the authenticated ORCID iDs. iDs should be displayed following our trademark and iD display guidelines.