Page MenuHomePhorge

Warn users that adding a second Multi-Factor Auth will require both instead of choosing one of them
Open, Needs TriagePublic

Description

  1. As an admin, set up TOTP as an auth provider at http://phorge.localhost/auth/mfa/
  2. As a user, add a first TOTP auth factor at http://phorge.localhost/settings/panel/multifactor/
  3. As a user, add a second TOTP auth factor at http://phorge.localhost/settings/panel/multifactor/
  4. Go to a Maniphest task and select "Sign With MFA" in the "Add Comment..." dropdown
  5. Realize you have to enter both auth factors instead of being able to select one of them

I ran into this problem, now other users also did.