A software application, often residing on a user’s mobile device, generates time-based, one-time passwords (TOTP) or push notifications for verifying identity when accessing the Workday platform. These applications provide a secondary layer of security beyond a standard username and password.
The implementation of this security measure significantly reduces the risk of unauthorized access arising from compromised credentials. Its adoption provides enhanced protection against phishing attacks and other methods used to gain illegitimate entry into sensitive systems. Historically, relying solely on passwords has proven insufficient, necessitating stronger authentication protocols. The presence of this additional layer of security is a critical component of compliance with various data protection regulations and internal security policies.
