{"id":6555,"date":"2022-09-21T05:45:00","date_gmt":"2022-09-21T03:45:00","guid":{"rendered":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/"},"modified":"2022-09-21T05:45:00","modified_gmt":"2022-09-21T03:45:00","slug":"jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques","status":"publish","type":"post","link":"https:\/\/www.cabinet-magar.fr\/de\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/","title":{"rendered":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques"},"content":{"rendered":"<p >Un jeton individuel d\u2019acc\u00e8s (token access) permet \u00e0 un utilisateur de se connecter \u00e0 un site Web ou une application mobile sans avoir \u00e0 ressaisir ses identifiants. La CNIL vient de faire un rappel sur les bonnes pratiques en la mati\u00e8re\u2026<\/p>\n<div>\n<h2>Jeton individuel d\u2019acc\u00e8s : entre usage et risques<\/h2>\n<p>L\u2019authentification par jeton num\u00e9rique (aussi appel\u00e9 token access) est notamment utilis\u00e9e pour :<\/p>\n<ul>\n<li>les proc\u00e9dures de confirmation de cr\u00e9ation de compte, de g\u00e9n\u00e9ration et de renouvellement de mot de passe\u2009 ;<\/li>\n<li>la connexion automatis\u00e9e \u00e0 un serveur pour faciliter l\u2019acc\u00e8s \u00e0 un service donn\u00e9 (validation d\u2019un formulaire pour le recueil du consentement, page de d\u00e9sinscription \u00e0 des lettres d\u2019information, etc.) ;<\/li>\n<li>la consultation directe de documents et de donn\u00e9es en ligne (bons de livraison, documents bureautiques en ligne, r\u00e9sultats d\u2019examen m\u00e9dicaux, etc.).<\/li>\n<\/ul>\n<p>Dans tous les cas, concr\u00e8tement, l\u2019utilisateur re\u00e7oit un lien \u00e0 suivre incluant un jeton d\u2019authentification : lorsqu\u2019il clique sur ce lien, le serveur v\u00e9rifie la validit\u00e9 du jeton, accepte l\u2019authentification et active la fonctionnalit\u00e9 demand\u00e9e par l\u2019utilisateur.<\/p>\n<p>Si l\u2019utilisation d\u2019un token access pr\u00e9sente de multiples avantages, cela n\u2019est pas sans risques : c\u2019est, en effet, un moyen d\u2019acc\u00e8s aux donn\u00e9es personnelles de l\u2019utilisateur.<\/p>\n<p>C\u2019est pour cela que l\u2019envoi de jetons frauduleux par mail ou SMS est devenu courant.<\/p>\n<p>Pour r\u00e9duire les risques li\u00e9s \u00e0 l\u2019utilisation d\u2019un token access, la CNIL recommande de respecter les principes suivants :<\/p>\n<ul>\n<li>journaliser la cr\u00e9ation et l\u2019utilisation des jetons ;<\/li>\n<li>d\u00e9finir une dur\u00e9e de validit\u00e9 des jetons adapt\u00e9e \u00e0 leurs finalit\u00e9s ;<\/li>\n<li>g\u00e9n\u00e9rer un lien d\u2019authentification ne contenant aucune donn\u00e9e personnelle ou avec un contenu hach\u00e9 ;<\/li>\n<li>imposer une nouvelle authentification dans le cas o\u00f9 le jeton permet l\u2019acc\u00e8s \u00e0 des donn\u00e9es personnelles ou si le jeton a une dur\u00e9e de vie insuffisamment limit\u00e9e ;<\/li>\n<li>limiter le nombre d\u2019acc\u00e8s, en pr\u00e9voyant un usage unique ou temporaire en fonction des finalit\u00e9s vis\u00e9es ;<\/li>\n<li>restreindre l\u2019utilisation du jeton \u00e0 certains services ou ressources en \u00e9vitant sa r\u00e9utilisation pour tous les parcours utilisateurs ;<\/li>\n<li>supprimer automatiquement, de mani\u00e8re temporaire ou d\u00e9finitive, l\u2019acc\u00e8s \u00e0 la ressource demand\u00e9e en cas de demandes intensives suspectes ;<\/li>\n<li>permettre la r\u00e9vocation d\u2019un jeton depuis un compte utilisateur en cas de comportement suspect automatiquement d\u00e9tect\u00e9 ;<\/li>\n<li>permettre \u00e0 l\u2019utilisateur de choisir le mode de transmission du jeton (par mail, par SMS, par courrier, etc.).<\/li>\n<\/ul>\n<p>Enfin, sachez que la CNIL a donn\u00e9 3 exemples pratiques de jetons individuels de connexion, consultables <a href=\"https:\/\/www.cnil.fr\/fr\/les-jetons-individuels-de-connexion-ou-token-access\" target=\"_blank\" rel=\"noopener\">ici<\/a>, qui concernent :<\/p>\n<ul>\n<li>la confirmation de la cr\u00e9ation d\u2019un compte utilisateur ;<\/li>\n<li>le suivi de livraison ;<\/li>\n<li>l\u2019\u00e9change de fichiers.<\/li>\n<\/ul>\n<p>Source : Actualit\u00e9 de la CNIL du 8 septembre 2022 : \u00ab Les jetons individuels de connexion ou token access \u00bb<\/p>\n<p><a title=\"WebLex - Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques\" href=\"https:\/\/www.weblex.fr\/weblex-actualite\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\" target=\"_blank\" rel=\"noopener\">Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques<\/a> \u00a9 Copyright WebLex &#8211; 2022<\/p>\n<\/div>\n<p><img src='https:\/\/www.weblex.fr\/images\/flux_actus\/tokenaccess.jpg'><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Un jeton individuel d\u2019acc\u00e8s (token access) permet \u00e0 un utilisateur de se connecter \u00e0 un site Web ou une application mobile sans avoir \u00e0 ressaisir ses identifiants. La CNIL vient de faire un rappel sur les bonnes pratiques en la mati\u00e8re\u2026<\/p>\n","protected":false},"author":0,"featured_media":6556,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[9,7],"tags":[],"class_list":["post-6555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actu-juridique","category-actualites"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar\" \/>\n<meta property=\"og:description\" content=\"Un jeton individuel d\u2019acc\u00e8s (token access) permet \u00e0 un utilisateur de se connecter \u00e0 un site Web ou une application mobile sans avoir \u00e0 ressaisir ses identifiants. La CNIL vient de faire un rappel sur les bonnes pratiques en la mati\u00e8re\u2026\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\" \/>\n<meta property=\"og:site_name\" content=\"Cabinet Magar\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-21T03:45:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data1\" content=\"2\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques\",\"datePublished\":\"2022-09-21T03:45:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\"},\"wordCount\":510,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg\",\"articleSection\":[\"Actu Juridique\",\"Actualit\u00e9s\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\",\"url\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\",\"name\":\"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar\",\"isPartOf\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg\",\"datePublished\":\"2022-09-21T03:45:00+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage\",\"url\":\"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg\",\"contentUrl\":\"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg\",\"width\":600,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.cabinet-magar.fr\/de\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cabinet-magar.fr\/#website\",\"url\":\"https:\/\/www.cabinet-magar.fr\/\",\"name\":\"Cabinet Magar\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cabinet-magar.fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/","og_locale":"de_DE","og_type":"article","og_title":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar","og_description":"Un jeton individuel d\u2019acc\u00e8s (token access) permet \u00e0 un utilisateur de se connecter \u00e0 un site Web ou une application mobile sans avoir \u00e0 ressaisir ses identifiants. La CNIL vient de faire un rappel sur les bonnes pratiques en la mati\u00e8re\u2026","og_url":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/","og_site_name":"Cabinet Magar","article_published_time":"2022-09-21T03:45:00+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Gesch\u00e4tzte Lesezeit":"2\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#article","isPartOf":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/"},"author":{"name":"","@id":""},"headline":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques","datePublished":"2022-09-21T03:45:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/"},"wordCount":510,"commentCount":0,"image":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg","articleSection":["Actu Juridique","Actualit\u00e9s"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/","url":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/","name":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques - Cabinet Magar","isPartOf":{"@id":"https:\/\/www.cabinet-magar.fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage"},"image":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg","datePublished":"2022-09-21T03:45:00+00:00","author":{"@id":""},"breadcrumb":{"@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#primaryimage","url":"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg","contentUrl":"https:\/\/www.cabinet-magar.fr\/wp-content\/uploads\/2022\/09\/tokenaccess.jpg","width":600,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.cabinet-magar.fr\/actualites\/jeton-individuel-dacces-token-access-le-point-sur-les-bonnes-pratiques\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.cabinet-magar.fr\/de\/"},{"@type":"ListItem","position":2,"name":"Jeton individuel d\u2019acc\u00e8s (token access) : le point sur les bonnes pratiques"}]},{"@type":"WebSite","@id":"https:\/\/www.cabinet-magar.fr\/#website","url":"https:\/\/www.cabinet-magar.fr\/","name":"Cabinet Magar","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cabinet-magar.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"}]}},"_links":{"self":[{"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/posts\/6555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/comments?post=6555"}],"version-history":[{"count":0,"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/posts\/6555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/media\/6556"}],"wp:attachment":[{"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/media?parent=6555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/categories?post=6555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cabinet-magar.fr\/de\/wp-json\/wp\/v2\/tags?post=6555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}