12.4 Security

All email systems allow users to forward email messages to other users either manually or via automated rules. One click approval cannot validate the originator’s identity (i.e. based on the originator’s mailbox or third party email system) and therefore it is important, irrespective of whether your administrator has implemented the ‘One step approval login’ option, that one click approval emails are never forwarded to unauthorised personnel either internally or externally to your organisation.