Design Brief - MFA

Project Introduction

The Client Portal currently secures user access only via single-factor authentication (username and password), exposing sensitive order placement, shipment tracking, and account-level settings to risks such as credential stuffing, phishing, and regulatory non-compliance. Implementing Multi-Factor Authentication (MFA) will add an additional verification step—via SMS, email, or authenticator app—to strengthen security, reduce unauthorized access incidents, and meet industry requirements without disrupting the existing login flow.

Users and Needs

• Logistics/Operations Managers → need fast, secure access to place and manage high-volume orders while ensuring compliance and data protection

• Warehouse/Shipping Coordinators → require seamless, low-friction authentication during rapid context switches in a high-stress environment

• Customer Support Representatives → need to minimize password-related support tickets and maintain uptime for users handling sensitive data

Tasks

1. Configure MFA settings in the Operations app (enable/disable MFA, select allowed methods, set frequency)

2. Initial MFA setup in the Client Portal (display QR code or setup code for authenticator app synchronization)

3. Log in with MFA (enter username and password, receive or retrieve security code via chosen method)

4. Enter authentication code on the security prompt to complete login

5. Manage MFA preferences (select or update preferred code delivery method on dedicated portal page)

Timeline and Deliverables