Engineering / ENG-1432
Administrators who sign in with a password set up an authenticator app
Description
Acceptance criteria
- From the enforcement date, a person holding Administrator who signs in with a password is asked to set up an authenticator before reaching the portal.
- TOTP: 6 digits, 30-second step.
- After set-up every password sign-in asks for a code.
- The secret is encrypted at rest; never shown again after set-up.
- Administrators signing in through single sign-on are not asked.
Comments (0)
No comments.