You Shall Not Pass

Explore the evolution of security measures in Moodle, an open-source learning management system, in this conference talk from linux.conf.au 2020. Discover how outdated password policies were updated to align with NIST guidelines, including checks for compromised passwords and personal information. Learn about the implementation of multi-factor authentication (MFA) and its integration with various authentication methods, including single sign-on (SSO) services. Gain insights into the challenges faced and lessons learned during the security enhancement process, applicable to any application's authentication flow. Understand the importance of adapting security practices to meet modern standards and protect user data effectively.