cloudflare / cloudflare/cloudflare-docs
2FA setup requires a password. Passwordless accounts don't have one.
- Dominant language
- MDX
- Stars
- 5.2k
- Forks
- 16.7k
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 337
Description
### Existing documentation URL(s)
- https://developers.cloudflare.com/fundamentals/user-profiles/2fa/
This is a bug both in the documentation AND in the actual 2FA setup workflow.
When a user creates an account using SSO (passwordless), and then wishes to enable 2FA, they are required to enter a password. SSO accounts don't have a password, and the 2FA process does not instruct them on how to create one. Navigating to "Change Password" doesn't help, as the user is then required to enter their "old password", which doesn't exist.
### What changes are you suggesting?
Include instructions for SSO-created accounts (e.g. Google, GitHub, and Apple) for how to set up 2FA when they don't currently have an account password both in the documentation as well as in the actual profile management section of the application.
### Additional information
- Navigate to https://dash.cloudflare.com/profile/authentication -> https://dash.cloudflare.com/profile/authentication/management -> https://dash.cloudflare.com/profile/authentication/add-security-key.
- Note that you are now prompted to enter a password that doesn't exist.
- Navigate to https://dash.cloudflare.com/profile/authentication
- Click "Change password"
- Note that you are required to first enter an "old password" that doesn't exist.
Contributor guide
Assessment
This issue has not been assessed yet.