Join GitHub today
GitHub is home to over 36 million developers working together to host and review code, manage projects, and build software together.Sign up
[Feature Request] Require Users (and admins) to verify themselves with one of their enrolled MFA methods #1573
Is there (or could there be) an option to:
Once a user has a MFA token enrolled, then force them to authenticate themselves with the token before they get access to the rest of the site. Atleast this way, an admin has to verify themselves before they get access to the settings and such to the site. And a user has to verify themselves before they can change their settings.
Yes, this has been there for years: