Idea detail description
IT Customers has requested Two-Factor Authentication (2FA) in navify POC Operations as a key requirement for tenders. The primary concern is that the lack of 2FA exposes special category data to significant risks if a corporate password is compromised. This could allow unauthorized access to both the application and the verification email. The proposal is to implement 2FA directly within navify POC Operations (e.g., via TOTP, SMS/email with precautions, or hardware tokens). Although SSO via navify Portal was suggested, direct in-app 2FA is crucial to meet specific client requirements and enhance overall security, improving the platform's trustworthiness and capability to handle sensitive data. |