> is Casa 'the' place where enrolled users can go and maintain their phone numbers and email addresses, in addition to defining their 2fa options?
No. Casa allows self service of the following: [2FA credentials](https://gluu.org/docs/casa/#two-factor-authentication) (this includes mobile phones) plus optionally authorized applications (via consent management plugin), linked accounts (via account linking plugin), and X.509 user certs (via certificate authentication plugin). There are more 2FA mechanisms supported like inwebo and bioId for which we have developed showcase plugins.