While maintaining the mandatory two-factor authentication requirement, the framework moves away from a mere one-time password ...