From 0d1c7e133a90dd87973c602eb799a148a9fd5787 Mon Sep 17 00:00:00 2001 From: tegwick Date: Wed, 29 Jul 2026 22:05:24 +0200 Subject: [PATCH] Record Binky MFA journey feedback --- ...WP-0020-self-service-and-user-administration-portal.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md index 2837e78..9f188e9 100644 --- a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md +++ b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md @@ -189,6 +189,14 @@ registration, directory login, replay denial, and cleanup. Remaining Binky acceptance is the human-selected password, MFA enrollment, and tenant claim/denial evidence; no one-shot operator password was used. +2026-07-29 human acceptance: `bernd.worsch` completed the portal-issued +password setup, privacyIDEA TOTP enrollment, and a fresh KeyCape +password-plus-OTP login. Two UX follow-ups were captured from the live journey: +accept/display the email alias instead of requiring the directory uid wherever +the provider permits, and make authenticator labels identify the account. +privacyIDEA's future enrollment label is now `Coulomb: {user}@{realm}` at the +otpauth issuer/account level; existing wallet entries require a local rename. + ## T08 - Closure and next-stage handoff ```task