MfaCodeTimeout

🛑

Disconnected

MfaCodeTimeout occurs when the provider requested a multi-factor authentication (MFA) code, but the user did not respond in time. The session remained idle and eventually expired due to inactivity.

This status typically follows an MfaMethodChoiceRequired, MfaCodeRequired or MfaActionRequired event, but no valid input or action was received before the timeout threshold.

Expected Developer Action

• Do not retry immediately. The same outcome will likely occur if the user doesn't engage.
• Notify the user that their session expired waiting for MFA input.
• Recommend that they re-initiate the connection and respond promptly to any MFA prompts when they appear.

Additional Notes:

• MfaCodeTimeout is one of the final statuses in the session flow. No further status updates will follow.
• If users frequently encounter this issue, it may be helpful to improve visibility around MFA prompts within your application's user experience.

Possible Previous Statuses:

• MfaMethodChoiceRequired
• MfaCodeRequired
• MfaActionRequired

Possible Next Statuses:

• None