Idea: Two-factor authentication
Content
Summary
System shall require 2 factor authentication to verify changes in contact details table (email or phone number):
System shall send notification to user upon validation of user data change
System shall allow user to validate and approve user detail updates
Overview
| ||
|---|---|---|
Function | 2 factor authentication |
|
Source |
| |
Related |
|
Prioritisation
Score | 10 |
|---|---|
Current Relevance | 10 |
Future Relevance | 10 |
Global Good | 10 |
Local Funding | Await audit for further recommendation |
Source
This was the idea mentioned during interviews with various stakeholders in February 2021.
Github: https://github.com/openimis/client-fe_js
Child Pages
Comments
Sep 8, 2021
Current security audit could look at it? Current audit on existing system, next phase next year could help developers to include other recommendations (probably including 2 factor authentication if recommended). Might want to consider where its needed and where not (which user can and can not) including the consideration how long the authentication is done - a day or week or so. Current audit should give opinions on what type of authentication is appropriate or not.