Loss of a second factor

The following procedure may be used when a user needs to access a protected application, but doesn't have his second authentication factor available:

• The user may enter its login/password on https://mydomain.trustelem.com.

• Instead of activating the usual second factor, he/she selects « Use an alternative method ».

• The user may then ask a rescue code:

  • He has to click on « Ask for a rescue code ».
  • All administrators receive an email alerting that a rescue code is requested by a user.
  • One of the admins has to click on « Rescue code » in the « Alerts » tab of the Trustelem admin dashboard.
  • This code can be transmitted to the user, after having properly checked the user's identity.
  • The user has 24h to use this one-time rescue code.