SMS OTP provider waits for OTP verification even if mobile number does not exist

[VivekVinushanth]

Describe the issue: When SMS OTP is not set as the initial step, if the user's profile lacks a mobile number, the system fails to generate an error message indicating that the mobile number is missing. Instead, it waits for the OTP to be provided. However, the process works correctly when SMS OTP is configured as the first step.

How to reproduce:

1. Create an application
2. Add Basic as the first step, email OTP as the second (if TOTP being second step unable to reproduce this)
3. Configure SMSOTP as the third step
4. Create a user and ensure doesnt have a mobile number
5. Ideally it should complain of number not being in profile. But it waits upon OTP verification

Expected behavior: Ideally it should complain of number not being in profile. This is the behaviour when SMS-OTP is configured as the first step. or second step with basic auth as first

Environment information (Please complete the following information; remove any unnecessary fields) :

• Product Version: [e.g., IS 5.10.0, IS 5.9.0]
• OS: [e.g., Windows, Linux, Mac]
• Database: [e.g., MySQL, H2]
• Userstore: [e.g., LDAP, JDBC]

---

Optional Fields

Related issues:

Suggested labels: