As Admin I cannot reset the MFA for a User in case of missing possiblility to login

[BotKup]

Hi

I have added a backend user to the Umbraco backend.
The user has set up his MFA authentication on the profile editing.
The user has lost the phone and cannot log in anymore to the Umbraco backend.
User has requested to reset the MFA to can use the Umbraco backend.

The Umbraco support said that I need to add the user as Member with Readonly rights and then I can do the reset.
I invited the user as Member, he got the invitation email.
The only problem that the user needs to accept the invitation as member, but for accepting the user needs to log in to the backend. So this is not possible.
As Admin I can reset MFA only for the members which has accepted the invitation.

So finally this is a circular reference and it is not possible to do it without the Umbraco Support.

As Admin I should be able to reset the MFA for users in the umbraco User management easily!

Regards
Botond Kupan

[bergmania]

Hi @BotKup ..

I'm sorry, but Im not sure I follow..

As admin you should be able to just remove the 2FA from the other user. Thereby the user can sign-in and activate 2FA again.

[BotKup]

For the backens user there is no possibility for admin to do that. The user can do that on his profile page. But he cannot log in.

[nul800sebastiaan]

Is this an Umbraco Cloud request perhaps?

[BotKup]

Yes. It is Cloud

[sajumb]

Hi @BotKup,
You're absolutely correct in your assessment. The current process does have its limitations, particularly in situations where a user loses access to their MFA device. Our support team's suggestion to add the user as a member with ReadOnly rights was intended as a workaround, but as you've pointed out, it isn't viable if the user is unable to log in to accept the invitation.

I apologize for the inconvenience this has caused. We acknowledge that the process is not ideal, and I want to reassure you that we have already recognized this as an area for improvement. In fact, enhancing the MFA reset flow is on our backlog, and we are actively working towards making this process more streamlined and user-friendly.

In the meantime, to assist with this specific case, please send an email to my Umbraco email starting with 'saj'. I will prioritize the reset of the user's MFA settings to ensure they regain access as quickly as possible, provided it hasn't already been reset.

kind regards
Søren, PO at Umbraco Cloud