From b0ed2374e3553510a39a0ad4d064f4368c1a8adc Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 3 Jan 2026 00:42:01 -0300
Subject: [PATCH] portal: require TOTP for new users

---
 backend/atlas_portal/provisioning.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/atlas_portal/provisioning.py b/backend/atlas_portal/provisioning.py
index 8a406ee..11b2a75 100644
--- a/backend/atlas_portal/provisioning.py
+++ b/backend/atlas_portal/provisioning.py
@@ -108,6 +108,7 @@ def provision_access_request(request_code: str) -> ProvisionResult:
                     "enabled": True,
                     "email": email,
                     "emailVerified": False,
+                    "requiredActions": ["CONFIGURE_TOTP"],
                 }
                 created_id = admin_client().create_user(payload)
                 user = admin_client().get_user(created_id)