Question
SiXworks Limited
GB
Last activity: 23 Jan 2024 9:04 EST
Security Password to continue
Hi,
The scenario we have is, there is a customer portal where the customers are able to log in view their personal dashboard to track the progress of their application, see personal tasks ect. One feature available is to view and edit their profile like name, email address, telephone ect.
There is an requirement which for security purposes, we'd like for the user to (re)-enter their password before being able to do this (change and amend their profile details). Could anyone suggest solutions this could be done or point me to relevant pega articles for similar features please. Cheers,
Ant
Updated: 23 Jan 2024 9:04 EST
Pegasystems Inc.
IN
@AnthonyTham hi
If I may put the problem statement differently, it is : "To make sure it is the same logged-in operator who is updating their profile".
This can be solved in many ways. The solution you are looking for is "asking the user to reenter password". While we can make it work, I would like to ask couple of questions.
1. Does the user login to the app using basic authentication mechanism?
2. If it is basic for now, how will you make this functionality work if you switch to Single Sign on mechanism later, because in that case Pega does not have control over user passwords?
Did you think of implementing some solutions like asking the user to enter an one time passcode (OTP), sent to their email? There are out of the box APIs to send OTPs and verify OTPs.