Packback Questions Should support Multi-factor Auth

4 votes

To increase the security of student accounts on Packback Questions, it should support an additional form of authentication, such as two-factor auth.

Under consideration Account Settings Suggested by: Craig Booth (30 Dec, '19) • Upvoted: 07 Jun, '21 • Comments: 3

Comments: 3

07 Jun, '21
Craig Booth
Noting that this appeared again as a request from a school (DI-197). In response to our standard security documentation they responded that MFA would be a "recommendation", although its absence does not block moving forward.
11 Jun, '21
Craig Booth
Noting that this appeared again in a request from a school (DATAINF-39): "What are plans for further data access security (beside username/password and IP restriction). How do you absolutely confirm the identity of the employee prior to their access of our data? Is MFA used for any validation?"
28 Jul, '21
Craig Booth
Appeared again in a request from a school district (DATAINF-137) as part of a data-sharing agreement. In this context, the request is for MFA "at a minimum level delineated by Article 4.3 of NIST 800-63-3"