Hey Miles,
Thanks for persevering here, and sharing your awful experience - it really helps when it comes to prioritising what we work on next, so other users don’t also end up going through the same thing.
I’ve moved your post to the IAM category (where we discuss issues around the Identity and Access Management project, which these are), and added the images back into your post.
To provide some explanation as to why discourse.mozilla.org feels more secure than your bank, there’s more discussions going on here than just the public ones, some are confidential, and for those we need our authentication system to be very secure. Unfortunately that does mean that for everybody else usability has suffered, at least for the time being, but it’s something we’re working on.
After discussing this with the team, this is an issue which can be fixed on the discourse side:
We’re also going to be fixing this on a more general level by allowing users to choose whether or not to use autologin. We expect to deploy this to production in the evening hours (PST) today. You would then be able to go to sso.mozilla.com to disable autologin.
Unfortunately at this point in the authentication process we don’t know who you are, so we’re unable to determine if you can or cannot use a particular authentication method.
Presumably you used the same email address, and that’s how we knew.
As for the issue where once you try to use GitHub you then can’t use anything else, even if you haven’t enabled MFA on GitHub, that’s a little more difficult to fix. We’ve discussed it as a team this morning, and hope to have some updates to share soon.
We also had a session about improving the sign up experience last week and I guess we will be able to deliver significant improvements in the next two months.
Hope this helps soothe your frustration!
Cheers,
Leo