163
edits
Changes
Updated FAQ to include info on FXA
==== '''Q''': ''How do I login with Mozilla IAM?'' ====
Mozilla IAM supports various login methods, such as "LDAP" (Staff logins), Firefox Accounts login, GitHub social login, Google social login and email login (which we call "passwordless").
Certain methods support and enforce the use of two-factor authentication (2FA) and may grant access to more sensitive services.
==== '''Q''': ''Why is my login failing with an error message telling me to use "Firefox Accounts/GitHub/Google/LDAP/etc" instead?'' ====
If your login (your primary email address used by Mozilla IAM) matches an existing account which provides higher
We only allow login, or authentication methods that can verifiably require two-factor authentication (2FA) in order to join any group that may grant you access to data that is not public, such as what we call [https://wiki.mozilla.org/Security/Data_Classification STAFF CONFIDENTIAL data].
At the time of writing, only LDAP, Google accounts that use our LDAP backend (i.e. '''not''' '@gmail.com' accounts) , Firefox accounts and GitHub account accounts support this functionality.
Example: you could get a GitHub account with two-factor authentication enabled. Here's some documentation on how to do this: https://help.github.com/articles/about-two-factor-authentication/. <br>Firefox Accounts also supports two-factor-authentication: https://blog.mozilla.org/services/2018/05/22/two-step-authentication-in-firefox-accounts/.
If more authentication methods add support for this in the future and seem to be otherwise safe, we'll gladly allow them as well.
[[File:Mozillians_-_add_identity.png|450px]]
5. Select “Log in with Github” option in next page.
[[File:Mozillians_1_-_verify_account_nlx.png|280px]]
6. Click Authorize mozilla. If you’re logged in to github in the same browser, you can skip the next 2 steps.
[[File:Mozillians_-_authorize_mozilla.png|300px]]
[[File:Mozillians_-_github_login_identity.png|400px]]
11. Trying to login with email to mozillians will return an error page, asking to login with github.
[[File:Mozillians_2-_forbidden_page_message_-_github_error.png|350px]]
==== '''Q''': ''The email address I use to login to my mozillians account matches the primary email of my github account. How can I upgrade my mozillians account from passwordless to github?'' ====
1. In the following steps we assume you have 2FA set for your github account. If not, see the steps from [https://wiki.mozilla.org/IAM/Frequently_asked_questions#Q:_How_can_I_set_up_two-factor_authentication_.282FA.29_for_my_github_account.3F here].<br>
2. Navigate to mozillians page and click Log In/Sign Up button. <br>
3. Select “Log in “Continue with Github” method from mozillians login page. <br> [[File:Mozillians_3_-_login_ways_moz_login.png|350px]]
4. Enter Github credentials.
[[File:Mozillians_-_login_with_github_to_upgrade_account.png|350px]]
[[File:Mozillians_-_upgrade_to_github.png|350px]]
7. Trying to login with email to mozillians will return an error page, asking to login with github.
[[File:Mozillians_2-_forbidden_page_message__error.png|350px]] ==== '''Q''': ''The email address I use to login to my mozillians account matches the primary email of my Firefox Accounts account. How can I upgrade my mozillians account from passwordless to Firefox Accounts?'' ==== 1. In the following steps we assume you have 2FA set for your Firefox Accounts account. If not, see the steps from [https://blog.mozilla.org/services/2018/05/22/two-_githubstep-authentication-in-firefox-accounts/ here].<br>2. Navigate to mozillians page and click Log In/Sign Up button. <br>3. Select “Continue with Firefox” method from mozillians login page. <br> [[File:3_-_moz_login.png|350px]]4. Enter Firefox Accounts credentials. [[File:5_-_fxa_login.png|350px]]5. Enter 2fa code from your application. [[File:9_-_fxa_2fa.png|300px]]6. Navigate to Settings -> Profile Identities section, and verify that Firefox Accounts is set as your login identity. That means this is the only account you can use from now on to login to mozillians. [[File:8_-_fxa_primary.png|350px]]7. Trying to login with email to mozillians will return an error page, asking to login with Firefox Accounts. [[File:7_-_fxa_error.png|350px]]
==== '''Q''': ''How can I upgrade my mozillians account from passwordless to LDAP?'' ====
1. Login to mozillians with your email.<br>
2. Navigate to profile settings page.
[[File:Mozillians_-_go_to_settings.png|350px]]
3. Scroll down to “Profile Identities” section and click “Add Identity” button.
[[File:Mozillians_-_add_identity_-_ldap.png|350px]]
4. Select Enter your LDAP email in the "Log in with LDAPemail" field and click "Enter" in the next pagebutton. [[File:Mozillians_4_-_login_with_ldap_add_Ldap_identity.png|300px]]5. Enter your LDAP credentials password and click "LOG INEnter" button. [[File:Mozillians_5_-enter_ldap_credentials_add_ldap_password.png|300px]]
6. Enter 2fa code from your application and click "Log In" button.
[[File:Mozillians_-_ldap_-_enter_2fa_code.png|250px]]
3. Scroll down to “Profile Identities” section and click “Add Identity” button.
[[File:Mozillians_-_profile_page.png|350px]]
4. Select Enter your LDAP email in the "Log in with LDAPemail" field and click "Enter" in the next pagebutton. [[File:Mozillians_10_-_login_with_ldap_volunteer_LDAP.png|200px300px]]5. Enter your volunteer LDAP credentials password and click "LOG INEnter" button. [[File:5_-_add_ldap_password.png|300px]] 6. Enter 2fa code from your application and click "Log In" button. [[File:Mozillians_-_enter_ldap_credentials_ldap_-_enter_2fa_code.png|200px250px]]67. Verify that success message is displayed, after adding the new LDAP identity.
[[File:Mozillians_-_success_message.png|350px]]
[[File:Mozillians_-_no_mfa_ldap_added_identity.png|350px]]
3. Scroll down to “Profile Identities” section and click “Add Identity” button.
[[File:Mozillians_-_add_identity_google.png|350px]]
5. Select "Log in with Google" in the next page.
[[File:Mozillians_3_-_login_with_google_moz_login.png|200px]]
6. Enter your google email, then click Next.
[[File:Mozillians_-_enter_google_email.png|250px]]
8. Verify that success message is displayed, after adding the new Google identity.
[[File:Mozillians_-_success_message.png|350px]]
9. Scroll down to “Profile Identities” section and verify that your Google account is set as in your login identityContact identities section.
[[File:Mozillians_-_google_identity.png|350px]]
