Two-step Authentication Challenge Questions

When staff or students access their digital ID they need to prove their identity via answering challenge questions.

The questions can be different for staff vs students. E. g. you might not have date of birth on record for staff.

We need two things:

1. Choose policy
   1. Which questions are asked of students
   2. Which questions are asked of staff
2. Ensure we have data to check the answers
   1. E.g. if you ask student “what is an email address for one of your parents?” then of course we need to know the answer
   2. So, we need the answers based on your choices in #1.