Clear requirements
Upgrade sign-in.
Keep access working.
Keep users and administrators able to reach the right parts of the application.
Connect the existing sign-in to a cloud identity service.
Keep passwords and other secrets out of the code and settings.
Make the goal, requirements, and open questions clear.
