Identity Validation

Configuration

Example Configuration

This section is intended as an example configuration to help users with a rough contextual layout of this configuration section, it is not intended to explain the options. The configuration shown may not be a valid configuration, and you should see the options section below and the navigation links to properly understand each option individually.

configuration.yml
identity_validation:
  elevated_session: {}
  reset_password: {}

Options

The two areas protected by the validation methods are:

  • Elevated Session which prevents a logged in user from performing privileged actions without first proving their identity.
  • Reset Password which prevents an anonymous user from performing the password reset for a user without first proving their identity.