What is the Beamery Auth0 user login migration?
How will Beamery change for my users after migrating?
Why are we making this change?
When will my Beamery account be migrated to Auth0 for user login?
What is the process for migration? (SSO-customers)
What is the process for migration (email+password-login-only customers)?
Does this technical change require contractual changes?
What information will Auth0 have access to?
Can I elect to remain on the existing login solution?
How does SSO work with Beamery and Auth0
Does this change impact our Beamery API integrations?
What is the Beamery Auth0 user login migration?
Beamery is migrating from our current proprietary user authentication solution to a new-and-improved solution powered by Auth0.
How will Beamery change for my users after migrating?
For now, most of the changes will be behind the scenes, however there will be subtle changes to the user interface for logging in. All existing URLs will keep working, and there will be no significant changes to workflow required.
Why are we making this change?
Auth0 is a leading identity platform that’s maintained by dedicated security experts. This allows us to offer even stronger, standards-based authentication that evolves in step with the latest security protocols and best practices.
This change is also a step towards us offering more features to enhance the security and ease-of-use for the product, e.g. multi-factor authentication, simplified user provisioning, and idle session timeout.
When will my Beamery account be migrated to Auth0 for user login?
The new solution is still in the final stages of QA. Soon we’ll be reaching out to customers to arrange their migration to the new solution. Our goal is to migrate all customers before the end of October this year.
What is the process for migration? (SSO-customers)
The migration will require you to configure your identity provider with our new service provider metadata. There is also a synchronized configuration change required within Beamery that we will perform to migrate you to the new solution.
Due to the coordination required for these configuration changes, we will arrange a call with your IT team to perform the migration.
We will arrange two calls, one to migrate your sandbox account, and then another a week-or-so later to migrate prod.
During the migration there will be a short period of time during which user login will be unavailable. This will only last as long as it takes for us to make our small configuration change on our side after the corresponding change is made in your identity-provider, but for safety we’re asking customers to plan for this period to be up to 30 minutes long. Users who are already logged in will be unaffected, and will be able to continue to use Beamery without interruption.
What is the process for migration (email+password-login-only customers)?
There will be no need for any coordinated configuration changes. We will notify you when your account is scheduled to be migrated, and perform the migration on our side, with no need for any changes on yours.
Does this technical change require contractual changes?
Auth0 is already included on Beamery's Subprocessor List from 2024 therefore rolling out this new authentication solution will not involve any contractual changes or additional data privacy notifications.
What information will Auth0 have access to?
For customers using Single Sign-On (SSO), your organization remains the source of truth for user login details — we never see your password. For customers who log in directly using email and password, we use Auth0 to securely manage login credentials, with passwords encrypted and stored following industry best practices.
In both cases, Auth0 stores basic user profile information such as email address, login history, and each user’s Beamery role (e.g. Marking Admin, Sourcing Standard). This information is only ever used to support secure authentication and authorization within our platform.
Can I elect to remain on the existing login solution?
We’re moving all customers to our new login system powered by Auth0 to ensure consistent security standards and simplify ongoing support. Our plan is to fully retire the existing solution, so continuing with this won’t be possible. This change enables us to offer a more secure and reliable authentication experience across the board.
How does SSO work with Beamery and Auth0
Beamery will continue to support both service-provider and identity-provider initiated SAML login. For the sake of demonstration, the following sequence diagram demonstrates the process for a service-provider initiated login with Beamery’s new Auth0-powered authentication solution:
Does this change impact our Beamery API integrations?
This migration only affects user logins, and integrations authenticating with basic auth will not be disrupted.
While we do now offer OAuth 2.0 authentication for our API, we don’t currently have plans to deprecate basic auth.
Please see our documentation on this if you’re interested in moving to OAuth for integration anyway to benefit from the security benefits that this brings: https://frontier.beamery.com/swagger-ui/#how-to-authenticate.