search

w3c / wcag

Web Content Accessibility Guidelines
https://w3c.github.io/wcag/guidelines/22/
Other
1.05k stars 232 forks source link

MFA Under SC 2.2.1 Timing Adjustable #3290

Open Jaunita-George opened 11 months ago

Jaunita-George commented 11 months ago

We should update the understanding document for this success criterion and add in an example that shows how multifactor authentication falls under the "essential" exception. I've seen this cause some confusion with developers who create MFA-enabled user flows and it might help if we had a specific example. Usually, after a certain period of time, the code that is generated through the workflow is no longer valid and the user has to have the page or application send a new code. Due to security concerns, the time limit can't be extended.

Here's the current text: https://www.w3.org/WAI/WCAG22/Understanding/timing-adjustable.html

patrickhlauke commented 11 months ago

Excellent idea/example, @Jaunita-George ... I'll work on a PR for this

ademcifci commented 4 days ago

@patrickhlauke just wondering if you've had thoughts around this that you could share?