Article Details
Id:20956
Product:finPOWER Connect
Type:NEW
Version:4.01.00
Opened:15/11/2023
Closed:21/11/2023
Released:29/04/2024
Job: J032432
High Importance

Portals; Multi-Factor Authentication; New option to "Prevent User from changing" the defaulted "Defer Days"

Portals using Multi-Factor Authentication (MFA) can specify a "Defer Days" value, e.g., 14. This means that, once the User has authenticated using MFA, they can sign in normally, without having to redo the MFA process each time, for 14 days.

This can be specified as the default behaviour, i.e., the "Skip this step for 14 days?" checkbox is checked by default.

However, the User or Client could still uncheck this box, if they did not wish to defer MFA.

A new "Prevent User from changing?" option has been added that will lock the checkbox on the login form and prevent the User or Client from NOT deferring MFA.

Although this is not recommended, if the Portal is configured to use "SMS Code" MFA, where there may be a cost involved, it can prevent an SMS being sent (and therefore a cost being incurred), every time a User or Client signs in to the Portal.