Engaging one two-factor auth notification should dismiss on other devices

Originator:jalkut
Number:rdar://28669876 Date Originated:07-Oct-2016 10:51 AM
Status:Open Resolved:
Product:Other Product Version:
Classification:UI/Usability Reproducible:Always
 
Summary:
When a two-factor authentication notification is displayed on multiple devices simultaneously, engaging with and dismissing the notification on one device should cause the notification to gracefully disappear from all other devices.

Steps to Reproduce:
With a two-factor authentication protected account:

1. Arrange to have two or more devices configured as trusted for a given Apple ID. For example, a Mac and an iPhone.

2. Go to an Apple-ID protected resources in Safari on the Mac. For example, log in to bugreport.apple.com.

3. Log in and confirm that the notification, asking to approve the login appears on all devices.

4. Engage with and confirm the authentication on the Mac, obtaining a login code and completing the login.

Expected Results:
The authentication notification on all other devices should disappear.

Actual Results:
The notification remains visible, even a long time after the login has occurred. This leaves the user in a confounding situation where they are later benig asked to approve a login which is no longer pertinent. They must either "approve" it in retrospect, thus gaining a login code that they didn't really want anymore, or disapprove it, yielding a message that there is danger of infiltration to the user's account.

At some stage: whether it's as soon as the notification is engaged/dismissed on one device, or after the login that prompted the notifications to appear has completely logged in, the notifications should disappear on all devices.


Version:


Notes:


Configuration:


Attachments:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!