chore(security): enable MFA for IDIR login

bcgov / nr-spar

SPAR app from FDS (Forestry Digital Services)

https://www2.gov.bc.ca/gov/content/industry/forestry/managing-our-forest-resources/tree-seed/seed-planning-use/spar

Apache License 2.0

3 stars 0 forks source link

chore(security): enable MFA for IDIR login #1569

Open DerekRoberts opened 2 months ago

DerekRoberts commented 2 months ago

Security doc recommends enabling MFA for IDIRs using FAM. Sounds like the sort of thing we should request for FAM. Any feedback or clarification? @RMCampos @craigyu

RMCampos commented 1 month ago

@DerekRoberts @xiaopeng0202

It looks like AWS Amplify supports MFA. https://docs.amplify.aws/javascript/build-a-backend/auth/concepts/multi-factor-authentication/

cc: @SLDonnelly

RMCampos commented 1 month ago

And here's MFA for AWS Cognito: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html

This is a task for FAM for sure.