Changed from two_factor to one_factor policy for initial testing. Users can access with just username/password without needing to set up TOTP or WebAuthn second factor. Can be changed back to two_factor once 2FA is configured. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>