Currently our Jenkins instances use local user databases which makes it harder for users to create accounts and manage access credentials. We use Google logins on Gerrit and OpenShift for years with great results. There's a Google Login plugin available so migrating to this solution should be relatively painless: https://plugins.jenkins.io/google-login/
Google SSO enabled on jenkins-staging, please log in so that I can provide admin access to the new accounts and in general test out the migration process.
Also we’d need to verify what’s the user publishing jobs via JJB so we need to ensure this isn’t broken by the new login method.
I’ve assigned the ticket to you since you are rebuilding Staging using Ansible. Please ensure it has Google SSO enabled after rebuild and then once you are familiar with the process we’ll need to proceed with Prod: there are dozens of users so they need to be migrated or re-enrolled to the new authentication system.