As an Instance Administrator, I want to be able to see successful/unsuccessful attempts of authenticating by verifiers

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.3.10 DXP GA1
• Component/s: Application Security > Multi-Factor Authentication
• Labels:
  • 7.3-must
  • QA-AUTOMATION
  • fc_20_04
  • has_acceptance_criteria
  • planned_for_7.3
• Epic/Theme:
  • Authentication
• Epic Link: Multi-factor authentication
• Sprint: Iteration 30, Iteration 31, Iteration 32, Iteration 33, Iteration 34, Iteration 35, Iteration 36

Description

The existing auditing framework is utilized to provide details when a user (un)successfully passes MFA validation.

1. Events of the attempts are registered for audit portlet and can be monitored, checked there.
   • This has been implemented already
   • This has to be documented
2. There is no additional notification to be sent out in case of e-mail OTP as there is already a notification implemented for the verifier.
3. It is necessary considering to add notifications at other verifiers where there is no notification implemented with the verifier itself already (like there is an e-mail notification already in case of e-mail OTP) Transferred to LPS-105358.
4. Another thing to consider is to show history of successful attempts and login time. It can help for users to see there was some "unauthorized" usage of login data for example at a public place after the user left that place. Transferred to LPS-101757.

Acceptance Criteria

1. As an Instance Administrator, I want to be able to see successful/unsuccessful attempts' details of authenticating by verifiers and by End Users under the Control Panel > Configuration > Audit