Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/hack4impact-umd/breastfeeding-center-gw/llms.txt

Use this file to discover all available pages before exploring further.

The BCGW Dashboard supports SMS-based multi-factor authentication (MFA) powered by Firebase. When enrolled, you will be prompted for a verification code sent to your phone number after every successful email and password login.
MFA is strongly recommended for all accounts, and especially for ADMIN and DIRECTOR roles which have elevated access to user management and data operations.

Enrollment flow

1

Navigate to the MFA enrollment page

Go to /mfa-enroll in your browser, or follow the prompt shown after logging in if your account has not yet enrolled. The enrollment page is only accessible to authenticated users who have not yet enrolled in MFA.
2

Click Enroll in 2FA

Click the Enroll in 2FA button on the enrollment page to open the phone number entry dialog.
3

Enter your phone number

Enter your phone number in international format (for example, +12025550100). You can also provide a display name for this MFA method to identify it on your profile page. Complete the reCAPTCHA challenge if prompted.
4

Receive and enter the verification code

An SMS verification code is sent to the number you provided. Enter the code in the verification dialog that appears. Standard SMS rates from your carrier may apply.
5

Enrollment complete

Once the code is verified, your account is enrolled in SMS 2FA. You will be redirected to the dashboard. Future logins will require this second step.

Logging in with MFA

After entering your email and password on the login page, you will be prompted for your SMS verification code. Enter the code sent to your enrolled phone number to complete the login. If you have multiple MFA methods enrolled, you can select which method to use during the login flow.

Unenrolling from MFA

You can remove an enrolled MFA method from your profile page:
  1. Go to your Profile from the sidebar.
  2. Scroll to the 2FA Methods section.
  3. Click Unenroll next to the method you want to remove.
The MFA method linked to your current account phone number cannot be unenrolled directly. If you need to remove it, update your phone number on the profile page first, then unenroll the old method.

Session and re-authentication

The MFA enrollment page checks your session age before proceeding. If too much time has passed since your last login, the session is considered stale and you will be logged out and asked to sign in again before continuing with enrollment. This prevents unauthorized enrollment by someone who gains temporary access to an open session.

Build docs developers (and LLMs) love