Projects Authentication Revamp

Alignment Stream

Collaborative, agent-driven refinement for a single-spec auth rollout.

All Decisions Open Files
Decision Recorded by Sarah Stone • 7:09 AM

Force migrate everyone immediately

Delete all passwords on launch day and require magic links instantly.

Decision Recorded by Sarah Stone • 6:29 AM

Retain SSO, Migrate Passwords

Magic links become default for individuals. Existing passwords get a 30-day grace period and enterprise SSO remains fully supported.

Decision Recorded by Sarah Stone • 7:09 AM

Use Magic Links as primary auth

The default login and signup entry point becomes an email-only magic-link flow.

Aligning Last updated 1 month, 1 week ago by Lena Park

Authentication Revamp Spec

Collaborative, agent-driven refinement for a single-spec auth rollout.

aligned

Overview

Authentication is moving to a single spec workspace so product, design, and engineering can maintain one structured source of truth while still tracking alignment.

aligned

Goals

  • Increase signup conversion by 30%.
  • Reduce password-reset support load by 50%.
  • Keep enterprise SSO as a compliant escape hatch.
iterating

Requirements

  • New individual users authenticate with magic links.
  • Existing password users get a 30-day grace period.
  • Enterprise tenants retain SSO.
iterating

UI/UX

The login and signup entry points collapse to a single email field. Delayed delivery needs visible recovery guidance and a retry affordance.

If delivery exceeds the SLA, the UI must explain next steps in plain language.

iterating

Tech Stack

Auth services need token issuance, delivery telemetry, and a reversible rollout path for password deprecation.

iterating

Infra

Infra needs provider health monitoring, retry-safe delivery pipelines, and tenant-aware SSO routing.

Delivery health must be exposed in operator tooling every 5 minutes.

blocked

Risks & Open Questions

  • Email latency beyond 10s may cause drop-off.
  • Phase 1 payment identity requirements remain unconfirmed.