Story

As a user of RHDH, I want to use the secure (resolve by GitHub/GitLab ID) sign-in resolvers by default so that I can securely sign in by resolving to a user in the catalog by an immutable ID. 

This depends on pulling in upstream changes in Backstage 1.48.0 which will be in RHDH v1.10

Background

The previous Jira, which contains the 2 upstream changes, needs to be pulled into RHDH. This is not a breaking change, but may be helpful to mention in RN as it provides improved security.

Dependencies and Blockers

QE impacted work

Need to update auth-provider E2E tests as the default resolve is changing.

Documentation impacted work

Docs for GitLab and GitHub auth need to be updated to reflect the new default sign-in resolvers.

Acceptance Criteria

upstream documentation updates (design docs, release notes etc)

Technical enablement / Demo