Two-factor login on staging site

Thanks for that, makes perfect sense. Security keys as per the specification are tied to a single hostname as the “Relaying Party”, so keys defined in production will not work for staging.