Open
Description
- The 2FA authentication should send the name of the site (as in the "E-learning portal name" setting in Chamilo, because currently we only send the e-mail address and that doesn't allow someone to remember what service it was for. It should be something like 'Test portal: [email protected]' instead of just '[email protected]'.
- When you setup 2FA, you normally have to confirm the 2FA activation by entering directly the code you get in your 2FA application. You scan the QR code and immediately give the code that appears, and then your 2FA is enabled.
- When I login and if the code was wrong, I expect a message telling me so, and in my tests I just get a login form refresh but nothing tells me what was wrong.
- To disable 2FA or change your password, you have to enter your 2FA code (not just to login).
Originally posted by @ywarnier in #5836 (comment)