This article describes an anonymized enterprise implementation. Company names, internal domains, repository identifiers, ticket numbers, and proprietary control names have been intentionally removed or generalized.
Multi-factor authentication is often described as a login problem: enter a password, receive a code, confirm identity.
That model was not enough for the system described in this case study.
The product ran in an in-store environment where the same tablet could be used by several people during a transaction:
an employee initiating the process;
