Skip to content

Reset Multi-Factor-Authentification (MFA) in user settings through the UI #5620

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
it-management-stadtbetrieb opened this issue May 21, 2025 · 0 comments

Comments

@it-management-stadtbetrieb
Copy link

it-management-stadtbetrieb commented May 21, 2025

Describe the feature you'd like

Summary:
Add a feature to the BookStack web interface that allows administrators to reset two-factor authentication (2FA) for users directly through the UI.

Use Case:
Currently, when a user changes their mobile device and loses access to their 2FA app, there is no way to reset their 2FA settings via the web interface.
As a result, even BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration.
This is not feasible in environments where BookStack is hosted as a managed SaaS solution and administrators do not have console access.

Proposed Solution:
Add an option within the admin user management interface to reset 2FA for individual users. This option could be placed in the user's profile or settings page and be accessible only to users with appropriate admin-level permissions.

Describe the benefits this would bring to existing BookStack users

  • Improves usability for administrators in SaaS or restricted environments
  • Reduces dependency on console access for routine account management tasks
  • Aligns 2FA management with modern admin expectations for web applications
  • Enhances user support and account recovery processes

Can the goal of this request already be achieved via other means?

BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration.

Additional context

This would be especially helpful in managed BookStack instances where the administrator role is functionally limited to the web interface, and server-level access is not available.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

1 participant