inex / IXP-Manager

Full stack web application powering peering at over 200 Internet Exchange Points (IXPs) globally.
https://www.ixpmanager.org/
GNU General Public License v2.0
375 stars 160 forks source link

Allow 2fa to be enabled on a per customer basis #876

Open barryo opened 8 months ago

barryo commented 8 months ago

IXP Manager's current implementation scope for 2fa is documented here: https://docs.ixpmanager.org/usage/authentication/#two-factor-authentication-2fa.

To allow a customer to enforce 2fa for all users in their organisation, we'd need to square how that integrates with OAuth via PeeringDB. Right now it would mean that OAuth would circumvent 2fa or it would just break access for those users or that organisation would need to disable auth via PeeringDB.

There's an open a ticket on PeeringDB to see if they can indicate if 2fa was used in the OAuth messages - peeringdb/peeringdb#1099.