Adding a banner notice and footer HTML to gateway login page (Security Requirement)

Ignition
1

Due to IT Security compliance requirements on ALL web apps deployed on our network, our company (and legal department) is requiring that on the Ignition Gateways where we login, to place a standard login notice message that says something to the effect of "usage of this resource is subject to the terms of our AUP" and they would like a footer banner to appear on the bottom of the gateway on every page stating something like "proprietary & confidential".

The best I can figure is this would require a module at this point. I was able to compile a sample module from the Ignition Github page that creates a link in the gateway menu and creates a new page called "HomeConnect" (https://github.com/inductiveautomation/ignition-sdk-examples/tree/master/gateway-webpage)

My question is, has anyone done something like this yet and is it possible? I struggled just to compile the SDK example, but it seems like it's possible that an html footer of even a javascript popup could be added?

I'm surprised Ignition doesn't have something like this built-in. The branding addition is nice, but for compliance purposes we need to be able to add more than just a logo and favicon.

2

I doubt you're going to get anywhere with this as I'm guessing there's no way to do this even with a custom module, but I could be wrong. Ignition would have to add it as a feature, and even then how much do you actually allow to be shown? Do you have to check a box to say you understand, does it have to be rich to allow a hyperlink to the actual AUP, etc? Does this need added to both Vision and Perspective client launchers? Do you not already have a login message on the computer when logging in that states this already? If so, wouldn't this be covered by that login banner/message?

I'd also push back some to IT/legal that it doesn't increase security at all. Any "hacker" doesn't care about your AUP. It just becomes noise that gets ignored by everyone, and the legal binding to it would be your employee handbook that states using any company owned/provided electronic devices and software are pursuant to the AUP and have everyone sign it.

4 Likes
3

I agree ...
... but if forced to do it I might offer a popup after login with the necessary mumbo-jumbo and accept (proceed) or reject (logout) buttons. It should be possible to then set a session variable, if required, so that it doesn't pop up again.