microtrain/42Viral — Issue #58: 8.3 Two factorauthentication
Author: microtrain
Created: 2012-02-04 15:49:44+00:00
State: open

We should allow a setting that forces 2 factor authentication against;

1 all users with the employee flag set to true
2 any user with who has chosen say I only want 2 factor authentication
3 any user belonging to an "organisation" (New concept) in which that orgs admin chooses to force 2 factor authentication
4 all users of the system

Immediate 2 factor modes will be a
- 1 time pin sent over text messaging (dies after 15 minutes)
- 1 time pin sent over email (dies after 15 minutes)

Future 2 factor possibilities (Outside this tickets scope but worth thinking about)
Could an oauth type of action be used as a valid second factor?
An implementation of Perfect Paper Passwords (https://www.grc.com/ppp)