MfaActionRequired

⌛

Connecting

MfaActionRequired indicates that the provider has triggered a multi-factor authentication (MFA) challenge that does not involve entering a code, but instead requires the user to approve a login attempt via a secondary action—such as tapping "Allow" in a mobile app notification.

This status typically appears after the user has selected an MFA method that supports interactive approval (e.g., push notification).

Implications:

• The session is paused, waiting for the user to complete the required action on their device.
• No data can be retrieved until the user responds.
• If the user does not act within a certain time window, the session may result in a timeout (MfaCodeTimeout).

Expected Developer Action:

• Prompt the user to check their mobile device or email for an MFA prompt.
• Clearly inform the user that no code is needed, but an explicit approval is required.
• Let the session continue once the provider confirms the action is complete.

Possible Previous Statuses:

• Connecting
• MfaMethodChoiceRequired

Possible Next Statuses:

• ConnectedCredentials - when the security answer is valid and Deck connects to the source successfully
• MfaCodeTImeout - when there's no action in 5 minutes, the session times out and closed.