Progressive profiling for mobile number fails when mobile number verification is enabled

[pabasara-mahindapala]

Description

We can enable progressive profiling for certain attributes by requesting them in the application and marking them as mandatory. When the mobile number verification on update [1] is enabled and the mobile number is set as a requested mandatory attribute in the application, the user will be asked to enter the mobile number when they log in. After the user enters the mobile number, an OTP is sent to the mobile number. However, the user is not prompted to enter the OTP and verify the mobile number.

The user cannot verify the already added mobile number through the My Account as well. To verify the mobile number, the user will have to add it again in the My Account profile page.

A user should be able to verify the mobile number with the received OTP after they add it in the missing claims page.

Steps to Reproduce

1. Configure an SMS Provider.
2. Enable "mobile number verification on update" as explained in the documentation [1].
3. Add the "http://wso2.org/claims/mobile" attribute as a requested mandatory attribute in the application.
4. Login to the application with a user who does not have a mobile number in the profile.
5. Enter the mobile number in the missing claims page when prompted.
6. An OTP will be received to the added mobile number.

To enable mobile verification in myaccount, add following config in deployment.toml

[myaccount.personal_info]
disabled_features = []

[1] https://is.docs.wso2.com/en/7.0.0/guides/users/attributes/user-attribute-change-verification/

Version

IS 7.0.0

Environment Details (with versions)

OS: Mac
Database: H2
Userstore: JDBC