coulomb-social/workplans/CSOC-WP-0016-mfa-setup-link.md
tegwick b8b4ee3dd1
Some checks are pending
Use-case regression gate / usecase-regressions (push) Waiting to run
Link optional authenticator setup from session details
Session details now points to the NetKingdom account page and security help.
The app does not show enrollment or require a one-time code. CSOC-WP-0016
is finished in the checkout and does not deploy this image.

Assistant: grok
Assistant-Session: 01a12cc2-e3b2-77a3-8aef-9cc60e577fee
2026-10-11 23:31:11 +02:00

1.4 KiB

id type title domain repo status owner topic_slug created updated flavor depends_on state_hub_workstream_id
CSOC-WP-0016 workplan Link authenticator setup from the coulomb.social account page communication coulomb-social finished claude-code coulomb-social 2026-10-11 2026-10-11 implementation
bf60ed62-5cbb-5276-80da-6c5dec302a2e

Founder finding F1 from the attended MFA run of 2026-10-11 (user-engine docs/evidence/2026-10-11-mfa-attended-u05-u08.md). coulomb.social intentionally stays password-only (KeyCape client mfaRequired: false), but users should be able to find optional MFA setup from the app.

Add "Manage authenticator app" to the session/account details

id: CSOC-WP-0016-T01
status: done
priority: low
state_hub_task_id: "b8bb27c0-de32-597e-9106-c5657d7ab130"

On the signed-in user's session/account details page, add a "Manage authenticator app (optional)" link to https://pink-account.coulomb.social/ and a short line pointing to https://users.coulomb.social/security for help. Do not show MFA status unless it comes from an authoritative source. Do not make OTP required.

2026-10-11: Session details shows the optional link and the NetKingdom security help line. The page does not display enrollment or require a one-time code. Password sign-in is unchanged. No separate residual: the link ships with the next app image, and this task does not deploy it.