You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2025/05/30 10:02:00 UTC

[jira] [Updated] (SYNCOPE-1887) Enduser: require re-authentication for sensitive features

     [ https://issues.apache.org/jira/browse/SYNCOPE-1887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Francesco Chicchiriccò updated SYNCOPE-1887:
--------------------------------------------
    Fix Version/s: 3.0.13

> Enduser: require re-authentication for sensitive features
> ---------------------------------------------------------
>
>                 Key: SYNCOPE-1887
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1887
>             Project: Syncope
>          Issue Type: Improvement
>          Components: enduser
>            Reporter: Francesco Chicchiriccò
>            Assignee: Francesco Chicchiriccò
>            Priority: Major
>             Fix For: 3.0.13, 4.1.0, 4.0.1
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Following [the suggestions|https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#require-re-authentication-for-sensitive-features] of the OWASP Authentication Cheat Sheet, allow to configure Enduser to  re-verify the user credentials before completing the following operations:
> * password change
> * profile update
> * MFA device or account removal



--
This message was sent by Atlassian Jira
(v8.20.10#820010)