Disable 2fa auth for specifi user

magento / security-package

Magento Security Extensions

Open Software License 3.0

66 stars 69 forks source link

Disable 2fa auth for specifi user #304

Closed ghost closed 2 years ago

ghost commented 2 years ago

Hello,

Is it possible to disable 2fa for specific user?

Exemple: api user.

Thank you.

m2-assistant[bot] commented 2 years ago

Hi @achatpc. Thank you for your report. To help us process this issue please make sure that you provided sufficient information.

Please, add a comment to assign the issue: @magento I am working on this

Join Magento Community Engineering Slack and ask your questions in #github channel.

nathanjosiah commented 2 years ago

Integration users do not require 2fa because they do not authenticate using username/password but rather with a from the admin. If the web api user needs to get a token using a username/password then 2fa is required by definition because otherwise it is a pointless feature and the web api could be used to bypass the mechanism.