[
https://issues.apache.org/jira/browse/SYNCOPE-1887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Francesco Chicchiriccò reassigned SYNCOPE-1887:
-----------------------------------------------
Assignee: Francesco Chicchiriccò
> Enduser: require re-authentication for sensitive features
> ---------------------------------------------------------
>
> Key: SYNCOPE-1887
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1887
> Project: Syncope
> Issue Type: Improvement
> Components: enduser
> Reporter: Francesco Chicchiriccò
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 4.1.0, 4.0.1
>
>
> Following [the
> suggestions|https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#require-re-authentication-for-sensitive-features]
> of the OWASP Authentication Cheat Sheet, allow to configure Enduser to
> re-verify the user credentials before completing the following operations:
> * password change
> * profile update
> * MFA device or account removal
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
