One of our customers has requested additional account security features. They would like to implement multi-factor authentication (such as an OTP challenge when a user signs in from a new or unrecognized device) to protect reader accounts. Additionally, they require a password expiration policy that prompts readers to reset their passwords after a configurable period of time.