This will be on the Auth0 non-prod tenant - [x] An Auth0 repository is setup to enable allow deploys from Github as per docs [here](https://auth0.com/docs/extensions/github-deployments) - [x] Set up a rule in Auth0 where it makes a post call to the /organisations/{}/users endpoint prior to returning a token to the web UI. [here](https://auth0.com/docs/rules/create-rules) - [x] Auth0 adds the appropriate permissions returned in the response from the User Account Service to the IDToken as a custom claim, as described [here](https://auth0.com/docs/tokens/create-namespaced-custom-claims) - [x] Auth0 appropriately handles any login failures as per login flow diagram - [x] Auth0 makes calls to the User Account Service via the API Gateway with an API Key
This will be on the Auth0 non-prod tenant