Identity Validation

Configuration

{{< config-alert-example >}}

identity_validation:
  elevated_session: {}
  reset_password: {}

Options

The two areas protected by the validation methods are:

• Elevated Session which prevents a logged in user from performing privileged actions without first proving their identity.
• Reset Password which prevents an anonymous user from performing the password reset for a user without first proving their identity.