Added the infra SOPs ported to asciidoc.

modules/sysadmin_guide/pages/fas-openid.adoc

@@ -0,0 +1,42 @@
+= FAS-OpenID
+
+FAS-OpenID is the OpenID server of Fedora infrastructure.
+
+Live instance is at https://id.fedoraproject.org/ Staging instance is at
+https://id.dev.fedoraproject.org/
+
+== Contact Information
+
+Owner::
+  Patrick Uiterwijk (puiterwijk)
+Contact::
+  #fedora-admin, #fedora-apps, #fedora-noc
+Location::
+  openid0\{1,2}.phx2.fedoraproject.org openid01.stg.fedoraproject.org
+Purpose::
+  Authentication & Authorization
+
+== Trusted roots
+
+FAS-OpenID has a set of "trusted roots", which contains websites which
+are always trusted, and thus FAS-OpenID will not show the Approve/Reject
+form to the user when they login to any such site.
+
+As a policy, we will only add websites to this list which Fedora
+Infrastructure controls. If anyone ever ask to add a website to this
+list, just answer with this default message:
+
+....
+We only add websites we (Fedora Infrastructure) maintain to this list.
+
+This feature was put in because it wouldn't make sense to ask for permission
+to send data to the same set of servers that it already came from.
+
+Also, if we were to add external websites, we would need to judge their
+privacy policy etc.
+
+Also, people might start complaining that we added site X but not their site,
+maybe causing us "political" issues later down the road.
+
+As a result, we do NOT add external websites.
+....