Challenge Response Questions

Eric Garrison asked on April 23, 2015 01:47

If you needed to integrate a Challenge / Response question system into Kentico, would you modify the security code and login webparts, or build 100% external. I have a customer who wants customers to have to answer "What is your favorite Pet" or a similar question each time they login from a new computer. I get that we will need to cookie and record IP address, not a big deal there. Just trying to engineer the best way to add this feature.

It only needs to be when they login to the Membership / Login, not CMSDESK.

authentication security membership

Correct Answer

Charles Matvchuk answered on April 23, 2015 01:56

Clone the existing web part/control and modify the new copy. You have last IP in the membership module to compare to, add a cookie so it is computer agnostic and you are set to go. I have my code that logs out the user if the challenge and cookie don't match.

This way is best for future upgrades.

2 votesVote for this answer Unmark Correct answer