18F / identity-idp

Login.gov Core App: Identity Provider (IdP)
https://secure.login.gov/
Other
524 stars 112 forks source link

LG-14325: Change from default to discouraged for authentication #11354

Closed mdiarra3 closed 1 week ago

mdiarra3 commented 2 weeks ago

🎫 Ticket

Link to the relevant ticket: LG-14325

🛠 Summary of changes

This makes it so when a user is leveraging webauthn as an MFA, it should not have to prompt user to enter in another credential before accepting the MFA.

📜 Testing Plan

When signing in with Security key and F/T Unlock, User should not be prompted to enter in PIN.

aduth commented 2 weeks ago

Nit: The title of the pull request doesn't seem accurate to its proposed changes, though the changelog itself looks correct.

mdiarra3 commented 2 weeks ago

whoops updated thanks for the callout @aduth