Two-factor Auth Being Disabled on Sync'd User

mrwizardno2

Member
Feb 25, 2022
13
2
8
40
I'm using Proxmox 8 with a synchronized user from an Active Directory realm. I opted-in for WebAuthn using a Passkey from my Mac and it works for a while, but then seems to become disabled or set to no.

1689434199190.png

I'm not sure what's causing this behavior. I do have a sync job set to refresh objects every 30 minutes --- but according to the documentation properties such as tokens and whether they're enabled are unaffected.
  • Properties (properties): Removes properties of entries where the user in the sync response did not contain those attributes. This includes all properties, even those never set by a sync. Exceptions are tokens and the enable flag, these will be retained even with this option enabled.

My Two-factor token is still there, it just doesn't seem to be "in-use" and I can't set TFA on the User back to Yes (at least not obviously through the portal).

1689434417659.png

What should I be doing differently? Thank you in advance for any help or guidance!