Allowing BCeID accounts to become BCSC accounts

[JohnamLane]

As an agency, we would like to discourage the use of BCeID because its 3rd party 2FA causes a lot of calls, and it leaves us subject sudden changes by external software vendors that make the 2FA apps.

In an effort to help people move their accounts and team members to use BCSC instead of BCeID, this change will address the following aspects:

• Team member invitation emails should no longer specify BCeID or BCSC
• Invitations can be accepted by BCSC no matter which account sent them
• The invitation link should point to a page that doesn't specify either BCeID or BCSC
• The Authentication type section of Account Info that BCSC users see now should be removed
• Review the tables that currently track account login source - update or abandon?

Assumptions:

• Back-end-wise, there is nothing in the invite that limits it being accepted by BCSC, no matter which account the invite came from.

Invite emails and login pages for BCSC and BCeID are shown here: https://docs.google.com/document/d/1ZZdAgREQQCYiOoSdHJPEkpmQVMjja-kk/edit

Design ticket: #19922

Related Figma Link

[trishreimer]

Here is some additional background on why we want to make it easier for people to switch to BCSC and why BCSC is needed:

• BCSC offers a high-level of identity assurance that proves who a person is online. • Government is committed to enhance transparency which can help combat crime and prevent identity theft for individuals, protecting British Columbians and keeping their information safe and secure. • The high level of identity assurance (using the BCSC) is needed to align with other government initiatives such as beneficial ownership, digital wallet/verified credentials, etc. • BCSC is easier and faster to use and provides immediate access to many government services, that may require authorization, like updating a business or logging into access Health records • Protecting the integrity of the BC Registry “business data” is paramount for Government, as Registries is the trusted source and record of truth for all business data in the Province. • BCeID will be retired at some point so steps are needed now to start to change behaviours. • Many people currently have business & basic bceid accounts and may already be using these today to support their business, so we will need capabilities in place to switch these people over to BCSC when it no longer becomes optional to use bceid. Today, we have 1,849,524 basic bceid accounts that are active and 277,877 business bceid accounts within IDIM (data provided on Feb 15 by IDIM)