Giving Veterinary Platform Users More Login Choices with Verification and Account Protection
Ficode enhanced authentication by implementing email login, single sign-on (SSO), and passkeys. The work also included multi-factor authentication (MFA), secure session management, safeguards against repeated failed login attempts, and administrator-led account recovery to strengthen access security and support different user requirements.
The project in context
The platform supports diverse user roles and organisational needs. Ficode implemented flexible authentication options, including email login, third-party single sign-on (SSO), and passkeys, to provide secure and convenient access.
Making access practical while controlling account risks
Clinical users need practical access across devices and organisations. The platform also needed clear handling for repeated failed attempts, privileged access and account recovery.
The challenge Before
Different login needs
One login path could not suit every user and organisation.Failed login attempts
Repeated failed attempts needed explicit account lockout and brute-force safeguards.Recovery and administration
Account recovery and privileged access needed clearly defined administrative controls.With Ficode Connected Approach
Flexible login methods
Email login, single sign-on and passkeys provide three authentication options.Account protection controls
Lockout and brute-force safeguards protect authentication against repeated failed attempts.Defined recovery route
Administrators can resolve access issues through a defined account-recovery workflow.Connecting login verification and access management
Expand the login methods
Provide email-based login, single sign-on through third-party identity providers and passkeys to accommodate different users and organisational access requirements.
Add verification within authentication
Include MFA verification within authentication flows, keeping the additional check distinct from the method a user chooses to sign in.
Manage authenticated sessions
Implement token and session handling to manage authenticated application use after the user has completed the required authentication steps.
Define protection and recovery controls
Introduce lockout, brute-force safeguards and privileged-user controls, with administrator-led recovery providing a defined route for resolving user access problems.
From a chosen login method to application access
Choose a login method
Use email login, single sign-on or a passkey.Complete applicable verification
Complete the verification required within the authentication flow.Establish the session
Token and session handling manage authenticated application use.CONNECTED OUTCOME
Users sign in through email login, SSO or a passkey. MFA provides a verification step. Successful authentication passes to token and session handling, followed by authorised application access.
More access options with defined account controls
Flexible sign-in
Users can choose email-based login, single sign-on through third-party identity providers or passkeys for platform authentication.
Verification and sessions
MFA verification within authentication flows works alongside token and session handling to manage authenticated application use.
Account safeguards
Account lockout and brute-force safeguards provide explicit handling for repeated failed login attempts within the platform.
Administrative recovery
Privileged-user controls and administrator-led recovery provide a defined route for account administration and resolving access issues.
The platform now supports several login methods, verification within authentication flows and token and session handling.
Confirmed technology and implementation scope
Email Login | Single Sign-On | Passkeys | MFA Verification | Token and Session Handling | Account Lockout | Administrator Recovery. Integration: Third-Party Identity Providers.
