🔱 Investigate enabling EntraID auth to Control Panel

[tom-webber]

Context

We currently have a requirement for Analytical Platform Control Panel users to have a GitHub user that is associated with the moj-analytical-services organisation. We also subsequently link their Control Panel user to their EntraID login.

Relaxing the requirement for a GitHub login will lower the barrier to entry for the platform, but could potentially lose us untracked benefits associated with this integration.

Proposal

Investigate the requirements and consequences of moving to EntraID authentication, with or without the existing GitHub and Auth0 logins.

Spike requirements

Any, 3 days

Definition of Done

Example

• Enumerate benefits of current auth mechanisms
  • GitHub integration
  • Auth0 integration
• Work out what we would lose by eliminating either or both existing auth mechanisms
• Determine requirements for enabling EntraID auth for Control Panel