1318788 - Use the Mozilla Lock instead of the Auth0-passwordless lock

Status: RESOLVED FIXED

(Taskcluster :: Services, defect)

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

17:25:15 <%weir> dustin: here's the super easy way : https://auth.mozilla.auth0.com/login?client=YOUR_CLIENT_ID

But that leads to

       Something went wrong.
  Please contact technical support.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Ah, passwordless-only is still not supported.  Will wait for a cue from the IAM folks.

Comment 3

[Tristan Weir [:weir] -- use NEEDINFO for response]

See https://github.com/mozilla-iam/auth0-deploy/issues/61

Since TaskCluster has a working implementation that no longer requires Persona, we will defer implementation of a Passwordless lock at this time. There are three routes forward:

- Auth0 will make a code change that will fix the existing limitation
- We will finalize our merge of Mozillians.org data with LDAP, allowing TC to use the Passwordless+LDAP lock and improving their UI
- We will build a custom implementation that permits a Passwordless-only lock

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Tristan, can you give an update on the status of the data merge?

Comment 5

[Tristan Weir [:weir] -- use NEEDINFO for response]

We're making some architectural changes to LDAP and Mozillians.org is making some UI changes to support more user actions with respect to LDAP. Unfortunately, this has pushed the data merge of all Mozillians.org users and LDAP users to mid-Q2.

We are still evaluating whether a passwordless-only Lock implementation makes sense, or if we should just wait. I will update the bug if work begins on that area.

Comment 6

[Dustin J. Mitchell [:dustin] (he/him)]

This is in effect now.  The old UI still uses the auth0 lock, but that UI is deprecated and soon, SOON, won't be used at all.