Bug 26166

Summary: Patron verification through SMS one time code
Product: Koha Reporter: Christopher Brannon <cbrannon>
Component: PatronsAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: dcook, gmcharlt, kyle.m.hall, magnus
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Christopher Brannon 2020-08-06 19:19:40 UTC
Often we have a patron that will call to do something with their account and cannot because they don't have their card on them or they have lost their card.  It would be FANTASTIC if there was a button on the account, for those that have SMS messaging setup, to send them a one-time code that they could read back to us to verify that it is them.

I could also see this as a validation process for setting up SMS messaging on the patron (OPAC) side.
Comment 1 David Cook 2020-08-06 23:53:17 UTC
I don't know about that first use case, although I suppose it's not that different to authenticating someone by scanning a card (ie something they *have* rather than something they *know*). That could be an interesting Koha Plugin.

I like the second use case better. Using it to validate setting up SMS messaging, or being used as a 2nd factor for authentication (ie something they *have* PLUS something the password that they *know*).
Comment 2 Christopher Brannon 2023-06-02 20:06:19 UTC
I could also see this method via email as well, in verifying the patron, and in verifying an email address (outside of the initial self registration method).