Users can be exempt from phone verification
What does this MR do and why?
Users can be exempt from phone verification
part of: https://gitlab.com/gitlab-org/modelops/anti-abuse/team-tasks/-/issues/332
Changelog: changed EE: true
Screenshots or screen recordings
How to set up and validate locally
The setup to verify this locally is quite the lift, but here's the steps if you'd like:
- Enable hard email confirmation
- Configure and enable Arkose
- Enable Identity Verification
- Setup and configure customers app
- Setup and configure Zuora
- Register a user, but don't complete Identity Verification
- Mark the user as medium risk: http://localhost:3000/admin/users/phonelessguy2/edit
- Confirm the user is required to perform Phone verification
- As an admin, create a phone verification exemption for the user: http://localhost:3000/admin/users/phonelessguy2/edit
- Confirm the user can now skip phone verification, and instead complete credit card verification.
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Edited by Jay