2059948 - Do not offer printable recovery codes to Duo users

Status: ASSIGNED

(bugzilla.mozilla.org :: General, defect)

Description

[Logan Rosen [:Logan]]

BMO currently offers Generate Printable Recovery Codes to users enrolled in Duo. BMO recovery codes work only with TOTP verification and cannot replace the Duo prompt, so Duo users can generate codes that are not useful for recovering access.

Hide recovery-code generation for Duo accounts, or otherwise prevent Duo users from creating unusable BMO recovery codes, while retaining the feature for TOTP accounts.

This was identified while documenting the current MFA behavior in bug 1224099 and reviewing https://github.com/mozilla-bteam/bmo/pull/2685.

Comment 1

[BMO Github Automation]

Attachment: [mozilla-bteam/bmo] Bug 2059948 - Do not offer recovery codes to Duo users (#2723)