[noviaITCS]

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• There are no open pull requests for the same update

for shared-credentials.json

• There's evidence the domains are currently related (SSL certificates, DNS entries, valid links between sites, legal documents etc.)
• One or more of the following:
  • If using from and to, the from domain(s) redirect to the to domain to log in, and previously served their own sign-in forms, so users are likely to have accounts saved for them in password managers.

Summary

Novia Financial has rebranded as Wealthtime, and its login is moving from novia-financial.co.uk to wealthtime.com. User accounts move across unchanged: the same usernames and passwords work on both domains. This entry lets password managers offer credentials saved on the old domain when users sign in on the new one.

Change

{
    "from": ["novia-financial.co.uk"],
    "to": ["wealthtime.com"]
}

Login hosts

Both domains use the same central Duende IdentityServer (OpenID Connect) single sign-on, backed by the same user accounts.

Novia host	Wealthtime host	Role
secure.novia-financial.co.uk	identity-server.prod.wealthtime.com	Identity server, where users enter their password
portal.novia-financial.co.uk	portal.prod.wealthtime.com	Customer portal, signs in through the identity server

The marketing site www.novia-financial.co.uk already redirects to www.wealthtime.com. The Novia login page itself is already branded "Wealthtime - Login".

Evidence the domains are related

1. Matching SPF records. Both domains publish nearly identical SPF records: the same IP ranges and the same Pardot, Salesforce, Exclaimer, Microsoft 365 and HubSpot includes, including the same HubSpot account (25437690.spf08.hubspotemail.net):

   novia-financial.co.uk  v=spf1 ip4:81.145.174.65/28 ip4:52.166.22.204 ip4:81.145.174.70 ip4:20.49.159.23 include:aspmx.pardot.com include:spfa.cpmails.com include:spf.protection.outlook.com include:spf.UK.exclaimer.net include:25437690.spf08.hubspotemail.net include:_spf.salesforce.com -all
   wealthtime.com         v=spf1 ip4:81.145.174.65/28 ip4:52.166.22.204 ip4:81.145.174.70 ip4:85.255.20.199 ip4:20.49.159.23 include:spfa.cpmails.com include:aspmx.pardot.com include:spf.protection.outlook.com include:spf.UK.exclaimer.net include:25437690.spf08.hubspotemail.net include:_spf.salesforce.com -all
   

2. Shared credentials already declared for Chrome. Both identity hosts publish matching Digital Asset Links files declaring shared login credentials (delegate_permission/common.get_login_creds), and Google's Digital Asset Links API confirms the link in both directions:

   • https://secure.novia-financial.co.uk/.well-known/assetlinks.json
   • https://identity-server.prod.wealthtime.com/.well-known/assetlinks.json

3. Shared DNS hosting. Both domains use Azure DNS.

4. Corporate and public evidence.

   • FCA Register: Novia Financial Plc (FRN 481600). The firm's registered website is www.wealthtime.com, with @wealthtime.com contact addresses, and Wealthtime is listed among its trading names. Companies House number 06467886.
   • Wealthtime press release: Wealthtime platform officially rebranded under Novia project