3635
MariaDBERRORNotableAccess ControlHIGH confidence

Authentication factor cannot be FIDO2 for this usage

Production Risk

Low — User creation or ALTER fails; no account change occurs.

How to reproduce
trigger — this will error
trigger — this will error
CREATE USER 'user'@'%' IDENTIFIED WITH authentication_fido;

expected output

ERROR 3635 (HY000): Authentication factor 1 cannot be FIDO2.

Fix

Use FIDO2 as second factor

Use FIDO2 as second factor
CREATE USER 'user'@'%' IDENTIFIED WITH caching_sha2_password BY 'pass';
ALTER USER 'user'@'%' ADD 2 FACTOR IDENTIFIED WITH authentication_fido;

Why this works

Correctly positions FIDO2 as the second authentication factor.

What not to do

Version notes

Sources
Official documentation ↗

MySQL 8.0 — 3635 ER_AUTHENTICATION_FACTOR_CANNOT_BE_FIDO2

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All MariaDB errors