Accounts with MFA disabled are receiving the MFA token prompt at login
tracked
Whirly Fizzle
- Over the last week, there have been quite a number of reports from users who receive the MFA prompt at viewer login to enter the MFA tokens on accounts that have MFA disabled.
- We've seen cases where the user has MFA enabled for their main account only but have received the MFA token prompt on their alts that have MFA disabled.
- We have also seen cases where the user doesn't have MFA enabled for ANY account, yet still receive the MFA token prompt at login. Some of these users do not even know what MFA is & have never had it enabled in the past on any account.
- I suspect this is a recent problem at the backend somewhere because the reports started roughly a week ago and we have seen Firestorm users reporting it on the Firestorm 6.6.17 release, which was released in December 2023.
- We have also seen reports from Alchemy Viewer users so I don't believe this is viewer specific.
- If the affected users who receive the MFA token prompt restart the viewer, this allows them to login without the token prompt blocking login
- I have not been able to reproduce this myself yet.
- Vix Linden has also seen several LL support tickets about this problem.
- There is a forum thread discussing this problem here: https://community.secondlife.com/forums/topic/512783-multi-factor-authentication/
Log In
Artorius Constantine
Artorius Constantine, just happened to me at 10:45 Restarting fixed it. Newest LL viewer.
Maestro Linden
tracked
Whirly Fizzle
Atlas Linden reprod this on the LL Viewer (Phew!).
He shared his log with Maestro.
Maestro Linden
Thanks, I took a look at the logs and see that there was an internal fault which login incorrectly treated as an "MFA required" event - the viewer was behaving correctly.
Maestro Linden
needs info
I put in a note to the forum thread about wanting details about specific login incidents that incorrectly trigger the MFA prompt (as the agent is not MFA-enabled). The username and timestamp of the login attempt should suffice.
Kathrine Jansma
Maestro Linden: Kathrine Jansma, using Cool VL Viewer:
2024-06-09 17:07:38Z WARNING: LLAlertDialog::LLAlertDialog: Alert: Multifactor authentication required via your MFA app.