Notes

This screen answersUS-30 US-10

Acceptance criteria

As a portal user, I want Email OTP as an alternative second factor, so that I can use 2FA without the Authenticator app.

As a portal user, I want to log in using Microsoft Authenticator or email OTP, so my account is protected beyond a password.

Given a user has Multi-Factor Authenticator enrolled via Microsoft Entra, when they log in with correct credentials, then they are prompted for Authenticator approval or email OTP before access is granted.
Given a user fails MFA 5 times, when the 5th attempt fails, then the account is temporarily locked per security policy. Auto-unlock after 15 min.
After auto-unlock and another 3 failed attempts within 24 hours, account is temporarily locked for admin to unlock. (full admin-unlock go to US-54).
Given MFA is enabled, when an existing user without enrollment logs in, then they are forced through enrollment before proceeding.

Wireframe state

DefaultExpired code

Enter your email code

We sent a 6 digit code to l.alharbi@alraneem-hospital.example. It is valid for 10 minutes.

Code expired. This code is older than 10 minutes. Request a new one and use the latest email.

Email code

Check your spam folder if it has not arrived after a minute.