As an Instance Administrator, I want to configure an Email One Time Password (OTP) verifier

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.3.10 DXP GA1, Master
• Component/s: Application Security > Multi-Factor Authentication
• Labels:
  • 7.3-must
  • NAT
  • fc_20_06
  • has_acceptance_criteria
  • pt-upgrade-review
• Epic/Theme:
  • Authentication
• Epic Link: Multi-factor authentication
• Sprint: AS | Iteration 10, AS | Iteration 11, AS | Iteration 12, AS | Iteration 13, AS | Iteration 14, AS | Iteration 15, Iteration 35, Iteration 36, Iteration 37, Iteration 38, Iteration 39
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/89289

Description

An authentication verifier is a factor of MFA. It is a definition of one step for the MFA process that can be configured by Instance Administrators. At the end, a configured verifier is a verification step during MFA process at login.

The Email One Time Password (OTP) verifier is a verifier with which the End User gets a verifier code that they must give during their login process at the appropriate step's screen. The End User's default system email address is used.

Acceptance Criteria

1. As an Instance Administrator, after enabling the MFA on instance level, I want to be able to configure the Email OTP verifier that can a part of the MFA login process as a verification step.
2. As an Instance Administrator, I want to set where I want to have the configured Email OTP verifier in the order of the configured verifiers.
3. As an Instance Administrator, I do not want the End Users to configure anything on their side regarding Email OTP verifier.