-
Title
Unable to log in to my Quest account when multi-factor authentication (MFA) is enabled -
Description
Quest offers multi-factor authentication (MFA, 2FA, or two-factor authentication) for registered users. MFA adds an extra layer of security to user accounts, drastically reducing the chances that bad actors can steal sensitive information.
When MFA is enabled for a registered user under subscription for ApexSQL Fundamentals Toolkit for MySQL bundle, that user will not be able to log in and use applications from the same bundle.
After entering credentials, and clicking on the Sign In button as shown below:
The user will receive a verification email that includes a verification code the user can enter to complete sing in:
However, within the application, instead of moving to the next step of logging in where the verification code received by email can be entered to confirm identity, after a few seconds of displaying “QuestID: loading…” a shown below:
The user is redirected to the initial login page making it unable to successfully log in and use the product:
-
Cause
The hard-coded redirect link within three applications from the MySQL bundle is broken when the MFA feature is enabled for registered users.
-
Resolution
One of the applications from the MySQL bundle is not affected and MFA works without problems. The user can use ApexSQL Database Power Tools for VS Code to log in to the Quest account and all other applications from the same bundle will pick it up.
Workaround 1
Make sure that Visual Studio Code is installed on the machine and that ApexSQL Database Power Tools for VS Code extension is installed from the Marketplace.
To log in, click either the Login button, plus icon (+) used for adding servers or Quest ID from the status bar:
The user will be redirected to a web login in the default web browser. Follow the instruction, and upon successful login, the “You can now close this page” message is shown. Close the tab and go back to VS Code. All other applications will pick up the Quest ID automatically and the user will be able to use them.
Workaround 2
Disable MFA for the registered user and log in.
For each factor that you previously set up, you will see information about when you configured and last used it.
To delete or remove an unused factor from your Quest/OneLogin profile:
- If the factor is the Primary, go to the menu for the factor and select Unset as Primary.
- Click the menu again and select Remove.
