Possibility to remember second factor / 2FA on a device, to avoid entering it at each authentication
The goal is to remember that the user already connected with a 2FA on a device, which become a "trusted device", and 2FA is not requested anymore
This could be a permanent/long lifetime cookie with a ciphered value that will be checked by the portal to validate the second factor step. The portal should check that the cookie is valid for the connected user.
Code from StayConnected plugin could be reused here.
This may imply a new portal menu to allow a use to revoke a trusted device.