search

OpenConext / Stepup-AzureMFA

GSSP IdP for Stepup Authentication using Azure MFA
Apache License 2.0
0 stars 1 forks source link

Remove UserRepository from GSSP #11

Closed pablothedude closed 4 years ago

pablothedude commented 4 years ago

The UserRepository is removed to prevent storage handling in the application. In order to be able to remove the repoository the ADFS NameId (email address) is added to the GSSP NameId which will be used in Stepup as SecondFactorIdentifier.

A timebased unique id is prepended to the id to have a unique id per registration so multiple tokens with the same email address could be used in Stepup.

pablothedude commented 4 years ago

Addressed the issues above

MKodde commented 4 years ago

Thanks, changes are looking good. I've amended your changes in commit f to the Remove UserRepository from GSSP commit.