Halo
Halo MFA enrolment
TOTP for bootstrap admin + passkey (WebAuthn). Email OTP remains stubbed.
Step 1: TOTP app setup
BOOTSTRAP_ADMIN_TOTP_SECRET is not set on this host yet.
Step 2: Passkey (WebAuthn)
After password+TOTP sign-in as bootstrap admin, register a device passkey for passwordless return visits.
Open passkey setupStep 3: Email OTP backup
Backup OTP remains a stub in this non-PHI pass.