[FEATURE] Notify backend user on failed MFA verification attempts

[TYPO3IncTeam]

ℹ️ View this commit on Github
👥 Authored by Torben Hansen [email protected]
✔️ Merged by Oliver Bartsch [email protected]

Commit message

[FEATURE] Notify backend user on failed MFA verification attempts

In terms of security, it is best practice to notify the user on
failed MFA verification attempts. TYPO3 currently only logs failed
MFA verification attempts to the sys_log, resulting in the users
not being informed about the failed MFA verification attempt.

This change adds a notification mechanism to inform TYPO3 backend
users via email when an MFA provider is configured and an
incorrect MFA verification code is entered during login. The
notification is only sent if the backend user has a valid email
address configured.

Resolves: #105783
Releases: main
Change-Id: I6db53d968bc644c102ffae443284db9bfeaa20b3
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/87391
Tested-by: Oliver Bartsch [email protected]
Reviewed-by: Garvin Hicking [email protected]
Reviewed-by: Oliver Bartsch [email protected]
Tested-by: core-ci [email protected]
Tested-by: Garvin Hicking [email protected]

➕ Added files

14.0/Feature-105783-NotifyBackendUserOnFailedMFAVerificationAttempt.rst

..  include:: /Includes.rst.txt

..  _feature-105783-1733506414:

==========================================================================
Feature: #105783 - Notify backend user on failed MFA verification attempts
==========================================================================

See :issue:`105783`

Description
===========

TYPO3 now notifies backend users via email when a failed MFA (Multi-Factor
Authentication) verification attempt occurs. The notification is sent only if
an MFA provider is configured and the user has a valid email address in their
profile.


Impact
======

TYPO3 backend users benefit from enhanced security awareness through immediate
email notifications about failed MFA verification attempts. This is especially
useful in scenarios where backend accounts with active MFA setup are targeted
by unauthorized access attempts.

..  index:: Backend, ext:backend

[linawolf]

@sarahmccarthy123 are you still working on this?