Account backup codes command not working

183 views
Skip to first unread message

Jason Komendat

unread,
Oct 26, 2023, 9:57:43 AM10/26/23
to GAM for Google Workspace
We have a script setup for our temp users so we can (sort of) make them use MFA. Basically the office gives them the password and one of the backup codes for the account which our script regenerates each night and puts the codes in a google share drive for that building to have access to. Its been working for months but the past few days a few of the buildings report the backup codes don't work. When I check I see the file we put in the drive has codes that don't match what they are. The script is just 4 commands per account. We have about 32 accounts. 

In troubleshooting one of the ones not working I run the command gam user XX...@ourdomain.com update backup codes it has an output of numbers but when I check the admin console and look at the codes its not updating. Has something changed? Is there some reason it seems to work for some and not others. I'm at a loss.



Script
gam user XX...@ourdomain.com update backup codes
#2 prints those codes to a file
#3 Deletes the file on the shgared drive (so they only have the current copy)
#4 uploades the file with the codes to the rive

Ross Scroggs

unread,
Oct 26, 2023, 11:06:47 AM10/26/23
to google-ap...@googlegroups.com
Where are the codes in the admin console?

If it works for some users and not others, talk to Google.

Ross

----
Ross Scroggs



NOTICE: This communication and any response to it may constitute a public record, and therefore, may be available upon request under Iowa public records law, Iowa Code Chapter 22.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/24b64ab1-dfe9-40d6-be14-a2b713f91fc9n%40googlegroups.com.

Jason Komendat

unread,
Oct 26, 2023, 11:24:00 AM10/26/23
to GAM for Google Workspace

What I meant is if you pull up a user and go to their security settings and get backup codes you can see them. Another thing I just found and Im not sure how this is happening is I would think the command gam user XX...@ourdomain.com update backup codes would change them. (it seems like it sued to) But I just tried 
gam user XX@XXX print backup codes to show what they are. Then the update command and its giving me the same codes. Do you think google support would help with GAM API commands

Ross Scroggs

unread,
Oct 26, 2023, 12:47:13 PM10/26/23
to google-ap...@googlegroups.com
Jason,

I have a few minutes right now, send me a Meet/Zoom ivitation

Ross
----
Ross Scroggs


Jason Komendat

unread,
Oct 26, 2023, 1:16:33 PM10/26/23
to GAM for Google Workspace
I has stepped away from the desk for a few if you still had time and wanted to take a look

Ross Scroggs

unread,
Oct 26, 2023, 1:18:41 PM10/26/23
to google-ap...@googlegroups.com
I have a few minutes now (it's 10:18 PDT)
----
Ross Scroggs



Jason Komendat

unread,
Oct 27, 2023, 8:23:02 AM10/27/23
to GAM for Google Workspace
So the first few attempts seem to be working, I think it was just thye timeing and adding the sleep cpmmand gave it enough time to process.

Thanks for helping me figure this out

Reply all
Reply to author
Forward
0 new messages