I've inherited a Moodle site, and I'm having some trouble with the MFA plugin; The 'Grace Period' factor is ignoring all other factors, meaning that whenever an admin logs in, they are prompted to register another authenticator app factor, despite having done so before. It won't let affected users proceed without doing so.
In the MFA settings, 'Ignored factors' is showing this to be the case, and the default should be 'None' - see attached screen grab. However, this list doesn't appear to be editable in the GUI. I've searched the/MFA directory for all files containing 'ignorelist', and can find various .php files (settings.php, factor.php, factor_grace.php), but I still can't understand how this list is being derived.
For now I've enabled the 'No other factors' factor and disabled 'Grace period', but this of course is temporary.
Can anyone assist? Many thanks.
Hi Jon,
In the Grace period settings can you un-select Security key by clicking and at the same time holding down the Control key?
Also, just making sure that you have come across the documentation: Multi-factor authentication.
Hi Helen, thanks for getting back to me.
Control-clicking any of the items in the Grace Period ignore list seems to have no effect - the list remains uneditable.
Thanks for the link to the MFA documentation - that was my first port of call, but sadly it doesn't mention how to edit this list.
For now I've just disabled Grace Period as a factor.
PS I should point out that the grey highlight over Grace Period in my screen grab is just an artifcact - when you click and drag over any of the items, then click away, this grey highlight appears. Whether I save with this highlight present or not, as soon as I click back on any other items, it goes away.