[Feb 2025] Accessibility Audit: Org sign-up flow

[DanielSass]

Background

The SimpleReport team performs quarterly accessibility audits as a proactive approach to ensure our products comply with Section 508 of the Rehabilitation Act.

Action requested

Use Axe DevTools to perform an accessibility audit of the org sign-up user flow. Do the page scan as well as any relevant guided tests.
Pages to visit:

• /app/sign-up
• /app/sign-up/identity-verification

Use cases to test:

• user selects that their org is already using SimpleReport
• user selects that they are trying to view their results
• user signs up for SimpleReport but is in a state we don't support yet and are prompted to join the waitlist
• user goes through identity verification workflow
  • they pass the Experian check
  • they are prompted to call to validate their identity
• after org identity verified, cont user sign up (inc all forms of MFA)

Acceptance Criteria

Full audit completed and tickets created for any accessibility violations.

Additional context

See tickets from previous audits #5765, #6325
Experian answers for ID verification step: 1, 4, 2, 1, 3 (1 is first option)

[emyl3]

Findings:

• Sign up - select status dev.simplereport.gov-Sign-up-select-status-2025-02-25.json
• Request access dev.simplereport.gov-Request-access-2025-02-26.json
• Get COVID-19 test results dev.simplereport.gov-Get-COVID-19-test-results-2025-02-26.json
• Sign up - organization information dev.simplereport.gov-Sign-up-organization-information-2025-02-26.csv
• Sign up - identity verification consent dev.simplereport.gov-Sign-up-identity-verification-consent-2025-02-26.json
• Sign up - personal details dev.simplereport.gov-Sign-up-personal-details-2025-02-26.json
• Sign up - identity verification dev.simplereport.gov-Sign-up-identity-verification-2025-02-26.csv
• Sign up - success dev.simplereport.gov-Sign-up-success-2025-02-26.json
• Create your password dev.simplereport.gov-Create-your-password-2025-02-26.json
• Session timeout dev.simplereport.gov-Session-timeout-2025-02-26.csv
• Account set up - Step 2 - Security question localhost_6006-Account-set-up-Step-2_-Security-question-2025-02-26.json
• Account set up - Step 3 - MFA complete localhost_6006-Account-set-up-Step-3c_-MFA-complete-2025-02-26.json
• Account set up - Step 3b - Verify Email secuirty code localhost_6006-Account-set-up-Step-3b_-Verify-Email-security-cod-2025-02-26.json
• Account set up - Step 3a - Google Authenticator MFA localhost_6006-Account-set-up-Step-3a_-Google-Authenticator-MFA-2025-02-26.json
• Account set up - Step 3b - Verify Google Authenticator localhost_6006-Account-set-up-Step-3b_-Verify-Google-Authenticat-2025-02-26.json
• Account set up - Step 3a - Okta Verify MFA localhost_6006-Account-set-up-Step-3a_-Okta-Verify-MFA-2025-02-26.json
• Account set up - Step 3b - Verify Okta Verify security code localhost_6006-Account-set-up-Step-3b_-Verify-Okta-Verify-securi-2025-02-26.json
• Account set up - Step 3a - Voice Call MFA localhost_6006-Account-set-up-Step-3a_-Voice-Call-MFA-2025-02-26.json
• Account set up - Step 3b - Verify Voice Call security code localhost_6006-Account-set-up-Step-3b-Verify-Voice-Call-2025-02-26.json
• Account set up - Step 3a - Security key localhost_6006-Account-set-up-Step-3a_-Security-key-2025-02-26.csv
• Account set up - Step 3 - MFA Select localhost_6006-Account-set-up-Step-3_-MFA-Select-2025-02-26.csv
• Account set up - Step 3a - SMS MFA localhost_6006-Account-set-up-Step-3a_-SMS-MFA-2025-02-26.json
• Account set up - Step 3b - Verify SMS security code localhost_6006-Account-set-up-Step-3b_-Verify-SMS-security-code-2025-02-26.json

[emyl3]

Issues created:

• Add page title and <h1> to Session timeout page #8539

[emyl3]

⚠ Running some of these flows in storybook because the acct creation steps keep timing out as I run through the tests and I don't have to keep repeating steps or resending activation links to access the pages.

[emyl3]

Ready for review