wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
742 stars 720 forks source link

Email OTP and TOTP as the first authentication step in MFA #14672

Open mpmadhavig opened 2 years ago

mpmadhavig commented 2 years ago

Describe the issue:

When configuring the email OTP or TOTP as the first step of the MFA flow, the following error will appear.

[2022-08-09 17:29:44,662] [c6e227d4-7fe9-4aa4-90ae-2dd7f5dd9049] ERROR {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} - Authentication failed exception! Can not find the authenticated user

Screenshot 2022-08-09 at 17 51 57

How to reproduce:

  1. Configure and OIDC sample app using management console.
  2. Configure MFA using one or more steps and add email otp and totp as authetication options for the first step
  3. Log into the sample app
  4. Select Email OTP as the authetication method.
  5. Login error pops as displayed in the above image

Expected behavior: Email OTP and TOTP should not be able to allow to use as the first step of MFA

Environment information (Please complete the following information; remove any unnecessary fields) :


Optional Fields

Related issues:

Suggested labels:

Yoshani commented 2 years ago

Same issue exists for SMS OTP