Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a way for admins to disable 2FA for a user #13954

Closed
MikeAlhayek opened this issue Jul 6, 2023 · 2 comments · Fixed by #16899
Closed

Add a way for admins to disable 2FA for a user #13954

MikeAlhayek opened this issue Jul 6, 2023 · 2 comments · Fixed by #16899
Milestone

Comments

@MikeAlhayek
Copy link
Member

Is your feature request related to a problem? Please describe.

There are times where a user can no longer use 2FA and has no more access to the recovery codes. And admin should have a way to disable 2FA from the Users admin UI.

Also when the Two-Factor Email Method feature is enabled, it may be helpful to add an option to email the user a single recovery code to login with.

I think we should Add a new Actions button next to the user and move both Delete and Edit Password into the Actions button. Additionally, inject Disable two-factor item in the Actions menu when Two-Factor Authentication Services feature is enabled.

And when the Two-Factor Email Method feature is enabled, add another item to allow sending the user a single recovery code when the user has a confirmed email.

@Piedone

@Piedone
Copy link
Member

Piedone commented Jul 12, 2023

A single-use recovery code would be great, though I think a simple disable 2FA is also enough: At this point, you as an admin should do whatever specific to the use-case you can do to make sure the user is legit. I'm not sure if another e-mail helps too much here.

@sebastienros sebastienros added this to the 1.x milestone Jul 20, 2023
@Piedone
Copy link
Member

Piedone commented Oct 11, 2023

Related: #13955

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants