Learning Center/Support and Feedback/Feature Requests
PlannedDoneNot planned
Role-based OTP
Josh Skinner
suggested this on May 25, 2010 08:18 am
User Story:
As an Admin I want OTP for only a certain set of roles because they have access
to a set of apps that require a higher degree of security.
Comments
I've been tempted by the OTP option, but it appears to be an all or nothing option.
Ideally, the ability to mix profile types would be more practical - so I do identify with Josh's user story also.
Graham
Would it make more sense to do it per app?
Per app would be ok, but nightmarish to administer I think. Maybe you guys could find a way to work it out though. It seems like you've solved the One User to many Apps problem with Roles, so it seems logical to reuse that method for OTP.
I'd like to deploy OTP to all users - but conditionally specify when it is required, like logging in for the first time from a new machine, changing user account details or password, or revealing a hidden password stored by One Login.
Brian,
The first scenario, logging in from a new machine/browser, is already on our roadmap and will be implemented soon. We'll take a look at the other two scenarios as well.
Thomas