Check user flows for errors after re-introducing MagicLinks capability

[chris-kuryak]

Problem statement

Joseph recently finished making some changes to the Okta widget implementation that fixed the MagicLink feature in emails. As such, we need to check the user flows to ensure they are all working as expected in Staging and Production (after deployment).

What you need to know

• Joseph made changes that fixed the MagicLink issues in #15018

Acceptance criteria

In Staging:

• [x] (Joseph) Add Magic Link feature back into email templates
• [x] (Joseph, Chris) Check all login/self-service scenarios to ensure change is effective
  • [x] Login
  • [x] Lock-out
  • [x] Reset Password
  • [x] MFA Factors
  • [x] New account first login setup

In Production:

• [x] (Joseph, Chris) Add Magic Link feature back into email templates

• [x] (Joseph, Chris) Check all login/self-service scenarios to ensure change is effective

  • [x] Login
  • [x] Lock-out
  • [x] Reset Password
  • [x] MFA Factors
  • [x] New account first login setup

• [x] Add new feature announcement in Release Notes

[chris-kuryak]

Note from Joseph: one of the dev-specific quirks going forward is that usage of the self-service flows HAVE TO happen through either prod or staging (depending on which okta server they need to self-service their account) as the "Web" app in prod/preview for okta will be specifically configured to point to a specific URL for the email magiclink

[chris-kuryak]

Unlock on Staging: Phone MFA still appearing as option even though I don't have a Phone MFA enabled.

As a short term solution, I have removed Phone as a verification method for Account Unlocking. This is found in Security - Authenticators - Password - Default Policy - Self-Service Unlock.

This will need to be re-activated once Joseph finds a solution that is innate to the Okta Widget coding itself.

[chris-kuryak]

Reset Password on Staging:

1. The Magic Link in the email just takes me back to the normal login screen. Does not take me to reset my password.
2. When using the verification code route, I do get to reset my password, and it confirms it was reset, but it does not redirect me to the login page. It just hangs.

UPDATE: Both are now fixed be removing the custom URI parameter on the Password reset template

[chris-kuryak]

All Staging flows now working properly