Twitch
Sign in with OpenID Connect
Sign in
prestine
Sign in with OpenID Connect
Signed in as (Sign out)
Close
Close
  • Sign in
  • Sign up
← Account Management: e.g., Login, Connections, Password Reset

How can we improve the account management experience?

Feedback

Account Management: e.g., Login, Connections, Password Reset: 2FA

Categories

  • CATEGORIES
  • All ideas
  • My feedback
  • 2FA 8 ideas
  • Connections 2 ideas
  • Feature Request 3 ideas
  • Login flow 2 ideas
  • Other 1 idea
  • Password Reset 2 ideas
  • Signup 2 ideas
  • Usernames 5 ideas

JUMP TO ANOTHER FORUM

(thinking…)

  • Searching…

    No results.

    Clear search results
    • Accessibility 19 ideas
    • Account Management: e.g., Login, Connections, Password Reset 25 ideas
    • Ads 65 ideas
    • Bits 19 ideas
    • Channel: Panels, settings, profile, notification, etc 73 ideas
    • Chat/Messaging 151 ideas
    • Community Guidelines 9 ideas
    • Creator Camp 31 ideas
    • Creators and Stream Features 104 ideas
    • Developers 95 ideas
    • Discovery: Browsing and Searching 213 ideas
    • Extensions 24 ideas
    • Game Mods & CurseForge 205 ideas
    • General 4,464 ideas
    • League of Legends Live Tracker Extension 23 ideas
    • Localization 6 ideas
    • Moderation Tools 31 ideas
    • New Creator Dashboard 323 ideas
    • Subscriptions 53 ideas
    • Twitch Applications: Consoles 49 ideas
    • Twitch Applications: Desktop 942 ideas
    • Twitch Applications: Mobile 145 ideas
    • Twitch Applications: TV Apps 40 ideas
    • Twitch Con 4 ideas
    • Twitch Rebrand 7 ideas
    • Twitch Sings 7 ideas
    • Twitch Studio 178 ideas
    • Video Features 414 ideas
    • Video Performance 485 ideas

  • Twitch

2FA status in users endpoint (when authing as the user)

We third party dev's often build tools that assist with moderation actions/services for broadcasters.

We tell Moderators to enable 2FA, but we have no way to check it.

It would be useful to block Logins to our tool if 2FA is not enabled. But 2FA data is not surfaced in the API and there's no way to require a User to be 2FA during the login/oAuth loop.

I'd like to see the users endpoint(s) provide 2FA status.
I expect this to be behind the user read or openID scopes.

openID allows email verified. Why not 2fa status (for example)

Worth noting that Discords floats "mfa_enabled" in it's user API so we have precedent.

10 votes
Sign in
prestine
Sign in with OpenID Connect
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

BarryCarlyon shared this idea  ·  July 06, 2019  ·  Flag idea as inappropriate…  ·  Delete…  ·  Admin →
Tweet

0 comments

Sign in
prestine
Sign in with OpenID Connect
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
Twitch
Twitch Terms of Service Powered By UserVoice

Your password has been reset

We have made changes to increase our security and have reset your password.

We've just sent you an email to . Click the link to create a password, then come back here and sign in.