#4497 - Log in using the Authenticator code
Hi Team,
I have been testing 2FA to implement on our sugar instance however I have come across a scenario where the 2FA code from the Authenticator app did not work.
Following are the Steps taken to reproduce the result:
1. Setup 2FA with authenticator app and the log in and out 2-3 using the Authenticator codes
2. Then I use the ‘Send Code to User' function which emails the 5 min expiry code
3. Now instead of using the email code - I (admin) decide to reset the 2FA for that user and log in the first time with the code on the Authenticator app
4. Then log back out and try logging back in using the Authenticator codes - it wouldn't log in unless I have first use the email code sent out again.
Does this mean that resetting the 2FA still requires to send out an email code even after it let you log in on the first attempt after resetting the users 2FA account or is this by design?
Thanks
Azlan
3 years ago
3 years ago
3 years ago
3 years ago