coulomb-social/workplans/CSOC-WP-0016-mfa-setup-link.md
tegwick df18df3377
Some checks failed
Use-case regression gate / usecase-regressions (push) Failing after 6m2s
Sync work-record index
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
2026-10-11 23:04:07 +02:00

1.1 KiB

id type title domain repo status owner topic_slug created updated flavor depends_on state_hub_workstream_id
CSOC-WP-0016 workplan Link authenticator setup from the coulomb.social account page communication coulomb-social ready claude-code coulomb-social 2026-10-11 2026-10-11 implementation
bf60ed62-5cbb-5276-80da-6c5dec302a2e

Founder finding F1 from the attended MFA run of 2026-10-11 (user-engine docs/evidence/2026-10-11-mfa-attended-u05-u08.md). coulomb.social intentionally stays password-only (KeyCape client mfaRequired: false), but users should be able to find optional MFA setup from the app.

Add "Manage authenticator app" to the session/account details

id: CSOC-WP-0016-T01
status: todo
priority: low
state_hub_task_id: "b8bb27c0-de32-597e-9106-c5657d7ab130"

On the signed-in user's session/account details page, add a "Manage authenticator app (optional)" link to https://pink-account.coulomb.social/ and a short line pointing to https://users.coulomb.social/security for help. Do not show MFA status unless it comes from an authoritative source. Do not make OTP required.