Packback Questions Should support Multi-factor Auth
To increase the security of student accounts on Packback Questions, it should support an additional form of authentication, such as two-factor auth.
Comments: 3
-
07 Jun, '21
Craig BoothNoting that this appeared again as a request from a school (DI-197). In response to our standard security documentation they responded that MFA would be a "recommendation", although its absence does not block moving forward.
-
11 Jun, '21
Craig BoothNoting that this appeared again in a request from a school (DATAINF-39): "What are plans for further data access security (beside username/password and IP restriction). How do you absolutely confirm the identity of the employee prior to their access of our data? Is MFA used for any validation?"
-
28 Jul, '21
Craig BoothAppeared again in a request from a school district (DATAINF-137) as part of a data-sharing agreement. In this context, the request is for MFA "at a minimum level delineated by Article 4.3 of NIST 800-63-3"