SalesforceCommerceCloud / sfcc-ci

Salesforce Commerce Cloud CLI
https://npmjs.com/package/sfcc-ci
BSD 3-Clause "New" or "Revised" License
231 stars 93 forks source link

Problem with CLI commands due to implementation of MFA. #181

Open saipavwan opened 4 years ago

saipavwan commented 4 years ago

Hi we are facing an issue with SFCC CLI commands after we implement MFA for Account Manager. We are trying to get all the users list using command sfcc-ci user:list --json -c 5 .So when script was on fly we are getting a pop up to the mobile for account login every time so scripts getting failed due to time outs. Can you guys suggest something to overcome this? Thanks in advance.

Rohith13 commented 4 years ago

Could you check to see whether the AM user you authenticate with has a role assigned, which requires 2-FA ?

In order to pull the users automatically you may authenticate an API client (not a user) and grant this API client the role required to access users in your AM org (the Account Administrator role)

Can you try this and let me know if you are still facing any issues ?

Trimud commented 4 years ago

Hi @Rohith13,

I see only two options to assign role to an API key:

I have enabled both and set MFA only for users with Business Administrator role inside this organisation but I'm still being asked to approve the login request when using sfcc-ci.

tobiaslohr commented 3 years ago

@Trimud @saipavwan As @Rohith13 pointed out, you have to assign role Account Administrator to your API client and only authenticate the API client via sfcc-ci client:auth <client-id> <secret>. You are explicitly NOT authenticating a user.

If you don't see role Account Administrator with your API client, I suggest you open a Support Case and have support assigning it on your behalf.