Bug 33254

Summary: 2FA - Trust current device
Product: Koha Reporter: Sam S <tech.sam>
Component: Staff interfaceAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: andrew.auld, chris.rowlands6, dcook, gmcharlt, helm.consortium, pedro.amorim
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:
Bug Depends on: 20476    
Bug Blocks:    

Description Sam S 2023-03-16 16:55:43 UTC
I've been testing the 2FA Koha module, I noticed there's currently no option to "trust current device" something that most MFA modules include, so a user can mark a local device to be excluded from the MFA check for an amount of time (typically a month or so). Not very essential, but would be a nice quality of life feature for users with dedicated machines.
Comment 1 Andrew Auld 2024-08-07 08:58:51 UTC
This is definitely a quality of life feature that our libraries would appreciate. We have had this feedback a few times since MFA implementation has become a requirement in UK public sector systems.
Comment 2 David Cook 2024-08-08 01:44:37 UTC
I reckon this would be easy enough to add. 

This is a good example of where a "borrowers_credentials" table would be great, as we could store a "mfa_token". And then the user could have a cookie with that token.