search

born05 / craft-twofactorauthentication

Craft plugin for two-factor or two-step login using Time Based OTP.
MIT License
36 stars 26 forks source link

Feature Request: Enable/Disable 2FA for certain user groups #57

Closed manuelthaler closed 7 months ago

manuelthaler commented 2 years ago

At the moment the enabling/disabling feature in the user editor is only visible for admins. do you see any chance to implement a feature to allow certain groups (these who are taking care of the community) to disable/enable the 2fa in the backend?

Either as a setting in the two-factor-authentication.phpsetting by adding the group id, or by using the regular permissions setting of craft?

roelvanhintum commented 2 years ago

@manuelthaler, seems like a good feature. I would do this with a permission setting.

sadmachine commented 1 year ago

@roelvanhintum We could definitely use a feature like this. We have a scenario where some craft CMS users need to use SSO, and others need to use 2FA. It would be ideal to be able to only enable 2FA for a specific group of users, and the rest can just use SSO to login. Unfortunately right now the 2FA is actually preventing the SSO from working entirely if we have forceBackend set to true, but we also need to force specific users to use 2FA, so someway to pick and choose would be very helpful.