The MFA function for LFDS users is great, but we would like a way to redisplay the QR code to configure multiple devices.
Hi Bert,
Showing the MFA secret only a single time was a conscious security measure. If a user would like to set up an MFA authenticator on multiple devices, they will need to do it all at once.
Would it be possible to add in the option for the IT administrators to send the QR code via e-mail or text message to users so they can add on multiple devices without needing to clear the MFA secret in LFDS?
The functionality that I would recommend (like to see), is if the user is a LFDS user that is using MFA, once they are logged in, under help or settings, add an option to either display current QR code or create a new QR code. Forcing an administrative user to go in and clear the MFA secret every time a user needs to set up a device can become to onerous.