As a new user of GC Notify, I need to be able to use a security key (yubikey) for 2fa so that I can easily secure my account
WHY are we building?
One participant in usability testing indicated they would like to use a yubikey for 2fa, but didn't know it was already possible.
WHAT are we building?
Improved flow for selecting security key for 2fa and better instructions
VALUE created by our solution
User satisfaction and better security
Given a user is setting up their account or updating their account settings, when they learn that they will need to use 2fa for security purposes, then they can set up their security key (yubikey) for 2fa.
[ ] Cypress UI tests if needed.
[ ] Generate appropriate log messages so that executions of this feature can be tracked
[ ] Can misuse of this feature cause harm? If yes, create an alert
[ ] Update the status of related findings, insights, and hypotheses on the Research Airtable
[ ] Once change/fix/feature is implemented, link relevant Airtable records to design artifacts (Figma)
[ ] Does the feature change our Information Architecture? If so, update the Sitemap in En/Fr
Description
As a new user of GC Notify, I need to be able to use a security key (yubikey) for 2fa so that I can easily secure my account
WHY are we building? One participant in usability testing indicated they would like to use a yubikey for 2fa, but didn't know it was already possible. WHAT are we building? Improved flow for selecting security key for 2fa and better instructions VALUE created by our solution User satisfaction and better security
Documentation and Artifacts
https://docs.google.com/document/d/1x_AULftkVhmZ8D4uLKeU3Q9KS_HpGqo3HuMSMrkTukY/edit
Acceptance Criteria
Given a user is setting up their account or updating their account settings, when they learn that they will need to use 2fa for security purposes, then they can set up their security key (yubikey) for 2fa.
[ ] Cypress UI tests if needed.
[ ] Generate appropriate log messages so that executions of this feature can be tracked
[ ] Can misuse of this feature cause harm? If yes, create an alert
[ ] Update the status of related findings, insights, and hypotheses on the Research Airtable
[ ] Once change/fix/feature is implemented, link relevant Airtable records to design artifacts (Figma)
[ ] Does the feature change our Information Architecture? If so, update the Sitemap in En/Fr
A11y
Bilingualism
Privacy considerations
Security controls in place
Measuring success and metrics
Related Research Airtable records
QA Steps