Unable to Reset Locked Account Password when MFA Enabled
-
It seems like the issue of "When using a password reset flow to unlock a user account, the process may fail if the user has MFA enabled." was noted in the 1.43.0 release. What exactly was the fix?
I am currently trying to set up the forgot password flow for users with locked account (ie. too many failed_login_attempts). For uses who have MFA enabled, they need to complete step up challenge first however I am getting a 500 error when trying to hit the /two-factor/login point to get a trustToken. How do I complete the forgot password flow with trust token for MFA users when their accounts are locked?
-
@anthea-mo It looks like the fix is to upgrade.
I also found this on the users accounts being locked.
If this information does not get you where you need, please let me know.
