Problem

With Duo enabled, mobile login often redirects into Duo for a push. On iPhone, switching from Hudu → Duo → back frequently drops the in-progress login or session, so users must re-enter credentials repeatedly. Biometrics help after a successful login, but they do not solve losing the session during the Duo step on the same device.

Desired behavior

Improve the mobile auth flow so approving Duo on the same phone does not force a full credential re-entry or kill the pending Hudu session. Ideally support Duo in a way that keeps the Hudu auth handshake intact (or in-app Duo where possible).

Why it matters

Technicians use Duo and Hudu on the same iPhone. Current friction makes Duo + mobile painful and slows daily work.

Acceptance criteria