search

catalyst / moodle-tool_mfa

A Multi-Factor Authentication Moodle plugin with flexible support for TOTP, Email, IP and more
https://moodle.org/plugins/tool_mfa
35 stars 38 forks source link

Authenticator app option is not working #448

Open JarvisYang123 opened 1 year ago

JarvisYang123 commented 1 year ago

We enabled both Email factor and Authenticator app . It can show Email factor properly and the verification codes workflow is working. But it doesn't show QR code to be scanned for the Authenticator app. Here is the setting image image

When the user login, it only show email factor option.
image

If you can assist to check what are other settings we need to set up or how to allow authenticator app option working, it will help us a lot. Thank you

Best Regards, Jarvis Yang

OliverOPI commented 1 year ago

The issue that Catalyst should address is changing the text string factor_totp/settings:totplink_help with the default value "If enabled the user will see a 3rd setup option with a direct otpauth:// link".

This text should be changed to "If enabled the user will see a 3rd setup option with a direct otpauth:// link. The QR setup code can be found in the user's Preferences page at /user/preferences.php".

The plugin settings page does not make it clear that the auth app set up lives under Preferences for the user.

Peterburnett commented 11 months ago

Hi folks,

I dont think that wording is quite right. That option controls what options are displayed to a user when setting up TOTP, but a user MUST still visit their preferences page to setup an authenticator app. The link is present in the user's profile page, but there are also configurations inside the gracemode plugin which will enforce factor setup after the duration of the grace period is expired.

I agree there is a documentation gap around where a users MFA controls all live on a per user basis, in their profile menu. A pull request adding this information to the README would be appreciated.