Two-factor Authentication

Hi bridgettw. Multi-factor authentication can involve many types of factors, each with dependencies on third party services. As such, the general approach for MFA is to use external authentication. This can be accomplished with the built-in authentication providers in Administration > Authentication or through a custom-developed provider.

Hi bridgettw. Multi-factor authentication can involve many types of factors, each with dependencies on third party services. As such, the general approach for MFA is to use external authentication. This can be accomplished with the built-in authentication providers in Administration > Authentication or through a custom-developed provider.

We'd also like to enable MFA in our Community to help improve security & are quite surprised it's not an OOTB feature by now. 

2FA with a generic authenticator app (not dependent on any 3rd party) is a lot more common that it was 3 years go, and I'd expect the platform to include support for this by now. I realise there is a marketplace option to add this, but it seems a lot more appropriate to be a core feature maintained by Verint.

I see this Idea which was Under Review 4 years ago, but it's been sat in 'Under Review' with no updates

Things have moved on since we talked about this, and using authenticator apps is very common. Most people are using one these days.

Verint wouldn't be adding something bespoke that's reliant on a specific 3rd party implementation. It would use the Time-based One-time Password (TOTP) algorithm, specified in the open standard RFC 6238.

We could really do with some movement on this to help further secure our communities, especially for admin accounts.