Move authentication to arbimon.org

antonyharfield commented 6 months ago

Context: We would like to (and need to for browser security reasons) have users login to Arbimon through an arbimon.org domain (not rfcx.org as it currently is). To achieve this, we will need separate logins for Arbimon and Guardian platforms.

This will solve the browser security issues affecting Safari (and soon to be Chrome) as identified in https://github.com/rfcx/arbimon/issues/1676.

Scope:

Create a new Auth0 account for Guardian
Move Guardian users to the new Auth0 account
Switch current Auth0 account to use arbimon.org as its custom domain
Ensure all web, mobile and desktop users are not impacted by this change (i.e. we want to avoid users having to download a new app)

antonyharfield commented 6 months ago

Molly raised a related point in an eng-support discussion that fully Arbimon branded signing experience would aid the conversion of new users from marketing emails.

Please remove the RFCx logo from the Arbimon login page and the Arbimon Sign Up page.

It isn't necessary to include and just confuses that sign in/log in user experience.

koonchaya commented 6 months ago

Should we remove the RFCx logo now?

naluinui commented 6 months ago

@koonchaya I think so according to Ant's comment above https://github.com/rfcx/arbimon/issues/1970#issuecomment-2108811588

rfcx / arbimon

Move authentication to arbimon.org #1970