Page MenuHomePhorge

Is MFA requiring all factors intentional?
OpenPublic

Asked by BlankEclair on Nov 25 2024, 10:06.

Details

When I tried to login to Wikimedia Phabricator (which runs Phorge, but keeps the Phabricator name) while answering only one factor, I am asked to answer the other one:

daugma.png (1×3 px, 237 KB)

I would've expected this to work like two-factor authentication (where I only need one factor). Is requiring all factors an intentional part on Phorge?

Answers

20after4
Updated 16 Days Ago

I believe that it is intentional but I think it should probably be configurable. It seems entirely reasonable to have an alternative authentication factor that is either/or instead for both.

New Answer