Page MenuHomePhabricator

Remove phabricator Multi-factor Auth for Atieno
Closed, ResolvedPublic

Description

Phab username: @Atieno

Reason for request:

  • I created my current TOTP 1 year ago and I since don't have access to the app with the Code so technically I don't have 2fa setup.

Request is to delete the current TOTP and setup a new one

Event Timeline

So the process here would likely be:

  1. Since you're a WMF employee, someone here could verify your identity either via a committed identity if you have that set up or via a quick video chat where we could ask you some questions. I'm fine taking the time to do this as a member of the Security-Team.
  2. Once your identity is verified, someone with access to phab4001 (not me, as I don't have it) would need to perform these steps to reset your current mfa configuration.

(For WMF employees, is a video chat a requirement, or would e.g. be an internal, written verification via a private "Slack" message also be sufficient?
PS: https://wikitech.wikimedia.org/wiki/Phabricator#Removing_Two_Factor_Authentication are the steps to perform for someone)

Peachey88 renamed this task from Multi-factor Auth for Atieno to Remove phabricator Multi-factor Auth for Atieno.Apr 11 2023, 8:06 PM

Hi @sbassett so can I schedule some time on your calendar for a video chat or can I slack you as @Aklapper has suggested. Though, I might go the video chat route it looks faster.

Hi @sbassett so can I schedule some time on your calendar for a video chat or can I slack you as @Aklapper has suggested. Though, I might go the video chat route it looks faster.

Works for me, though we might also want to try to get an SRE on that call (or someone with root on phab4001) to then perform the mfa reset once your identity is confirmed. Perhaps we should tag SRE to triage this task as a clinic item and then work from there.

I can do that as part of Clinic Duty, please schedule some time between 08:00 and 16:00UTC.

I have added @sbassett to the meeting, as they are the member of the security team that will verify before I remove the 2FA.