{"action":"created","issue":{"url":"https://api.github.com/repos/18F/cg-product/issues/431","repository_url":"https://api.github.com/repos/18F/cg-product","labels_url":"https://api.github.com/repos/18F/cg-product/issues/431/labels{/name}","comments_url":"https://api.github.com/repos/18F/cg-product/issues/431/comments","events_url":"https://api.github.com/repos/18F/cg-product/issues/431/events","html_url":"https://github.com/18F/cg-product/issues/431","id":185479720,"number":431,"title":"Update our SecureAuth MFA policy","user":{"login":"brittag","id":391313,"avatar_url":"https://avatars.githubusercontent.com/u/391313?v=3","gravatar_id":"","url":"https://api.github.com/users/brittag","html_url":"https://github.com/brittag","followers_url":"https://api.github.com/users/brittag/followers","following_url":"https://api.github.com/users/brittag/following{/other_user}","gists_url":"https://api.github.com/users/brittag/gists{/gist_id}","starred_url":"https://api.github.com/users/brittag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brittag/subscriptions","organizations_url":"https://api.github.com/users/brittag/orgs","repos_url":"https://api.github.com/users/brittag/repos","events_url":"https://api.github.com/users/brittag/events{/privacy}","received_events_url":"https://api.github.com/users/brittag/received_events","type":"User","site_admin":false},"labels":[{"id":394627779,"url":"https://api.github.com/repos/18F/cg-product/labels/HighBar","name":"HighBar","color":"006b75","default":false}],"state":"closed","locked":false,"assignee":{"login":"brittag","id":391313,"avatar_url":"https://avatars.githubusercontent.com/u/391313?v=3","gravatar_id":"","url":"https://api.github.com/users/brittag","html_url":"https://github.com/brittag","followers_url":"https://api.github.com/users/brittag/followers","following_url":"https://api.github.com/users/brittag/following{/other_user}","gists_url":"https://api.github.com/users/brittag/gists{/gist_id}","starred_url":"https://api.github.com/users/brittag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brittag/subscriptions","organizations_url":"https://api.github.com/users/brittag/orgs","repos_url":"https://api.github.com/users/brittag/repos","events_url":"https://api.github.com/users/brittag/events{/privacy}","received_events_url":"https://api.github.com/users/brittag/received_events","type":"User","site_admin":false},"assignees":[{"login":"brittag","id":391313,"avatar_url":"https://avatars.githubusercontent.com/u/391313?v=3","gravatar_id":"","url":"https://api.github.com/users/brittag","html_url":"https://github.com/brittag","followers_url":"https://api.github.com/users/brittag/followers","following_url":"https://api.github.com/users/brittag/following{/other_user}","gists_url":"https://api.github.com/users/brittag/gists{/gist_id}","starred_url":"https://api.github.com/users/brittag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brittag/subscriptions","organizations_url":"https://api.github.com/users/brittag/orgs","repos_url":"https://api.github.com/users/brittag/repos","events_url":"https://api.github.com/users/brittag/events{/privacy}","received_events_url":"https://api.github.com/users/brittag/received_events","type":"User","site_admin":false}],"milestone":null,"comments":12,"created_at":"2016-10-26T18:55:50Z","updated_at":"2016-11-30T01:53:09Z","closed_at":"2016-11-30T01:53:09Z","body":"In order to satisfy the requirement in [IA-2 (11)](https://web.nvd.nist.gov/view/800-53/Rev4/control?controlName=IA-2) that MFA for our team needs to involve \"a device separate from the system gaining access\", we need to minimize the risk of GSA SecureAuth including email as a MFA option.\r\n\r\n**Acceptance criteria**\r\n- [x] Remove email as a SecureAuth MFA method for Ops UAA.\r\n- [x] Update IA-2 (11) to say that cloud.gov doesn't use email for SecureAuth MFA for the Ops UAA login system.\r\n- [ ] Update [our IA procedures](https://github.com/18F/compliance-docs/blob/master/IA-Policy.md) to match that policy.\r\n"},"comment":{"url":"https://api.github.com/repos/18F/cg-product/issues/comments/263759273","html_url":"https://github.com/18F/cg-product/issues/431#issuecomment-263759273","issue_url":"https://api.github.com/repos/18F/cg-product/issues/431","id":263759273,"user":{"login":"brittag","id":391313,"avatar_url":"https://avatars.githubusercontent.com/u/391313?v=3","gravatar_id":"","url":"https://api.github.com/users/brittag","html_url":"https://github.com/brittag","followers_url":"https://api.github.com/users/brittag/followers","following_url":"https://api.github.com/users/brittag/following{/other_user}","gists_url":"https://api.github.com/users/brittag/gists{/gist_id}","starred_url":"https://api.github.com/users/brittag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brittag/subscriptions","organizations_url":"https://api.github.com/users/brittag/orgs","repos_url":"https://api.github.com/users/brittag/repos","events_url":"https://api.github.com/users/brittag/events{/privacy}","received_events_url":"https://api.github.com/users/brittag/received_events","type":"User","site_admin":false},"created_at":"2016-11-30T01:53:09Z","updated_at":"2016-11-30T01:53:09Z","body":"Updated in the SSP!"}}
{"actor":{"display_login":"brittag"}}