Page MenuHomePhabricator

Add Authentication Factor fails silently for users without a verified email address
Closed, ResolvedPublic

Description

When onboarding new hires, we usually create accounts for them in advance, add them to the correct projects, et cetera. Our workflow is basically like this:

  1. Invite a new user to Phabricator on their new company email address (often done a few days in advance).
  2. Have the user request a password reset.
  3. Click link in email.
  4. Set a new password.
  5. Set up multi-factor authentication.

Today we were onboarding a few people, but nothing happened after clicking Add Authentication Factor. Doing a browser Inspect on the button and opening the URL manually, revealed a Please verify your email message. It seems that email verification is required before setting up multi-factor authentication, but the error won't be shown when clicking on the button.

Event Timeline

epriestley claimed this task.

This should be fixed by changes in T13024.