$ApprovalLink - No credentials required?
In a request that was sent for approval, a user forwarded the email to another user who was then able to click on the approval link and approve the request. The request was shown to be approved by the user who forwarded the email.
This implies credentials are held in the URL that is generated by $ApprovalLink
Is it possible to remove these credentials or alternatively to force a credential challenge if the user is not already logged into Service Desk?