Matteo Tatoni created SYNCOPE-1883:
--------------------------------------
Summary: Google MFA authentication does not validate scratch codes
Key: SYNCOPE-1883
URL: https://issues.apache.org/jira/browse/SYNCOPE-1883
Project: Syncope
Issue Type: Bug
Components: wa
Affects Versions: 4.0.0
Reporter: Matteo Tatoni
Fix For: 4.0.0
If an app is configured through WA to be protected with Google MFA, upon first
login the system prompts to set up a device for {{OTP}} generation and
generates {{scratch codes}} for the user to use in case the configured device
is unavailable. To use the {{scratch codes}}, simply enter one that has never
been used in place of the {{OTP}} during authentication. However, currently,
the system raises an exception and does not allow authentication using
{{scratch codes}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
