Implement multi factor authentication in Asset Manager and UCMDB.
Asset Manager and UCMDB store data related to several critical areas of our business, like SOX, PCI, Government and networks. Therefore, our security team is asking us to secure access to both tools via MFA. All logins to the UI should be candidates to be secured by MFA, including the Admin logins.
We would likely prefer MFA be implemented via SMS to the mobile device listed in the user's profile or via an e-mail to the address listed in the user's profile. After entering the userid and password on the login, a six digit code would be delivered to the mobile device or e-mail and the user would have to enter that to complete the login to AM/UCMDB.