High Level Functions

Self-Service MFA application requires several high-level functions.

• Send personal email verification message
• Receive personal email verification message
• Store personal email address
• Enroll in MFA - The setting must be changed in Office 365
• Send MFA settings reset request verification message
• Receive MFA settings reset request verification message
• Reset MFA settings - This must be initiated in Office 365

Components for each function

• Web front end
• API/Database
• Office 365 script runner

Emergent functions

• Authenticate, get guid and friendly identifier (username/displayname)
• Send email
• Email address must be validated, cannot be a work account
• Verification messages will leverage JWT
• Stored personal email addresses must be backed up
• Communications between Office 365 script runner and API/Database
  • MFA Enroll request/response
  • MFA Reset request/response