cancel
Showing results for 
Search instead for 
Did you mean: 

Multi Factor Authentication Not Working

kcpublic
I'm a contributor level 1
I'm a contributor level 1

I have multi factor authentication enabled on my Fido account but I am able to log in with just userid and password on my laptop. I am not asked for a one time passcode and my browser is always cleared of cookies after every session. I also tested signing out, clearing cookies, and logging in again. 

 

Why isn't the one time passcode always required? It should always be for security purposes.

1 REPLY 1

kcpublic
I'm a contributor level 1
I'm a contributor level 1

Just to continue this thread, I was just on technical support call and they say that because the device was authenticated in the past, the MFA code doesn't have to be entered again.

 

This is poor security. An MFA code should be requested for every login regardless of the device used.