Two-factor authentication using SAP commerce and Spartacus

Hi,

We're using Spartacus 4.3.0 and sap commerce 2105.7. Our customer would like to have a two-factor authentication for every login in the spartacus frontend. We're *not* using SAP customer data cloud.

The second factor should be some token sent to the customer's email address which is stored in the account. So we thought about creating a business process similar to the forgotten-password process, which creates a token after the provided password was verified, sending a link with the token to the customer and when the link is clicked, the customer is automatically logged in.

Did anyone implement such a scenario already?

Best Regards,
Joachim