Make the mobile app a factor in MFA via notification like "Are you trying to log in...?"
tracked
Nyx Onyx
As an alternative to TOTP for MFA, make the Second Life app on Android and Apple devices act as a MFA factor for logging in:
- Log in on Second Life app, in settings add the current device as a trusted factor for MFA
- When logging in on a new (different) device, and periodically, if enabled like stated above, send a notification to the trusted device asking if the user is trying to log in on another device, and have the user pick a number that corresponds to one showing on the other device's screen.
Adobe, Microsoft and Google all three uses this for securing logins while making it easier to use than reading and typing a code in time before it changes.
Log In
Lettie Linden
Merged in a post:
MFA via SL Mobile
Dreamscaped Dagger
Allow authentication via text/email and the Second Life mobile app so we do not have to deal with third party token generators.
Flow
- MFA is enabled on the account
- User enters user name and password at login
3a. If on mobile:
- Send code notification via specified email or text message
3b. If on desktop:
- Send push notification to the mobile app to pop up on screen
- User enters code or accepts the authentication pop up to continue
- Account login successful on inquiring device
Nyx Onyx
This post can probably be merged with https://feedback.secondlife.com/mobile-public-beta-features/p/make-the-mobile-app-a-factor-in-mfa-via-notification-like-are-you-trying-to-log
LeillaLux Resident
An email option would be best for me (I don't always keep my phone handy).
Bridie Linden
updated the status to
tracked
fyreflower Resident
I wanted to second this Nyx suggestion. I trust a Linden Labs authenticator more than a Master G one.
Toothless Draegonne
I'll also suggest perhaps adding Yubikey and similar support. MFA is good. MFA that locks your account out if you lose your phone, not so much. Being able to set up and just tap a Yubikey at the SL login would be a great way of making MFA easy, and in fact easier than a normal login.
Nyx Onyx
Toothless Draegonne It would be great if we could add more than one extra factor, and more than one of the same type as well, and let you choose at time of login / re-authing.