Has anyone used custom code to add in a TFA layer for users already logged in to Stacker? We’ve been using the email link method through a white label portal in Astra but this does not meet with our client’s security standards due to a PII exposure issue- specifically it looks like Stacker is using persistent login, so once someone logs in using the email link they stay logged in until they log out. The use case for our product calls for it to be used on public computers sometimes, so a persistent login like this could potentially expose an end user’s information.

I’ve built auto-logout mechanisms for some clients with similar security concerns. (custom JS)

We are working on this functionality for portal users to be logged out after a set time.