As an Instance Administrator, I want to configure a Time-based One Time Password (TOTP) verifier

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.3.10 DXP GA1, Master
• Component/s: Application Security > Multi-Factor Authentication
• Labels:
  • 7.3-could
  • NAT
  • fc_20_07
  • has_acceptance_criteria
  • planned_for_7.3
  • pt-upgrade-review
• Epic/Theme:
  • Authentication
• Epic Link: Multi-factor authentication
• Sprint: AS | Iteration 10, AS | Iteration 11, AS | Iteration 12, AS | Iteration 13, AS | Iteration 14, AS | Iteration 15, Iteration 38, Iteration 39, Iteration 40, Iteration 41, Iteration 42
• Git Pull Request: https://github.com/csierra/liferay-portal/pull/736

Description

Instance Administrators can setup a TOTP verifier in MFA that End users can configure and use as a verification step in their MFA process.

Acceptance Criteria

1. As an Instance Administrator, after enabling the MFA on instance level, I want to be able to configure a TOTP verifier on instance level which allows users to configure and use as a verification step in their MFA process.
2. As an Instance Administrator, I want to set where I want to have the configured TOTP verifier in the order of the configured verifiers.
3. As an Instance Administrator, I want to be able to see successful/unsuccessful login attempts with the configured TOTP verifier.
4. As an Instance Administrator, I want the End Users to be able to configure the TOTP verification step on their side and use that in their MFA process.