Bug 35210

Summary:	2FA: more flexibility
Product:	Koha	Reporter:	R Bradshaw <rebecca.bradshaw>
Component:	Authentication	Assignee:	Bugs List <koha-bugs>
Status:	NEW ---	QA Contact:	Testopia <testopia>
Severity:	enhancement
Priority:	P5 - low	CC:	chris.rowlands6, david, dcook, dpavlin, helm.consortium, m.de.rooy
Version:	unspecified
Hardware:	All
OS:	All
Change sponsored?:	---	Patch complexity:	---
Documentation contact:		Documentation submission:
Text to go in the release notes:		Version(s) released in:
Circulation function:
Bug Depends on:	20476
Bug Blocks:

Description R Bradshaw 2023-11-01 08:32:07 UTC

Would it be possible for the 2FA to have more flexibility thank it currently does. At the moment staff need to set it up via a phone and a QR code, once this is set up there is an option to have the code emailed which is great but it does ask for 2FA each time they login. This is not helpful. 
Is there functionality for the 2FA to ask once a week or once a day/if signing in on a different comuputer/device?
Thanks!

Comment 1 Katrin Fischer 2024-03-17 22:01:13 UTC

Hi, 

when you are not sure if Koha already supports a certain functionality or has a certain feature, a good way to find out is by asking on the mailing list or in the IRC chat. Bugzilla is not really great for asking questions as only a few people check on all bugs filed.

There are some other bugs filed already for improving 2FA that might cover some of what you are asking for:

* Bug 31118 - Allow to send the TOTP token by email when enabling 2FA
* Bug 33254 - 2FA - Trust Current Device

It's also good to make the bug descriptions as specific as possible, so it's possible to see with a glance what a bug might be about.