Identity Validation

Configuration

configuration.yml
identity_validation:
  elevated_session: {}
  reset_password: {}

Options

The two areas protected by the validation methods are:

  • Elevated Session which prevents a logged in user from performing privileged actions without first proving their identity.
  • Reset Password which prevents an anonymous user from performing the password reset for a user without first proving their identity.