search

kontron / redmine_oauth

Redmine authentication through OAuth.
GNU General Public License v2.0
61 stars 27 forks source link

Is it possible for the plugin to work with the redmine(5.0.5)'s 2FA ? #15

Closed CM4115 closed 1 year ago

CM4115 commented 1 year ago

Tried to require every user to activate 2FA. The 2FA activation works after the 1st login. After that it doesnt require an auth code from the 2fa from every login of the user. It goes directly to the dashboard.

picman commented 1 year ago

You mean that OAuth plugin is installed and activated but a user uses the original Redmine login form with login and password and 2FA is not required despite it is set so in their account? Do you have any other plugins installed?

CM4115 commented 1 year ago

OAuth plugin is installed and activated and the 2FA doesn't work (via Oauth login button). It automatically redirects to dashboard instead of requiring to 2FA. (the 2FA is activated and required for the user) No, I don't have other plugins. Thank you for responding.

picman commented 1 year ago

If a user uses OAuth authentication, the authentication is completely handed over to the selected OAuth provider and all authentication settings in Redmine including 2FA are not taken into account/skipped.