Other ways of logging in

pondersource / nextcloud-mfa-awareness

Make Nextcloud aware of whether the current user is logged in with Multi-Factor Authentication

MIT License

0 stars 2 forks source link

Other ways of logging in #4

Closed michielbdejong closed 1 year ago

michielbdejong commented 1 year ago

[x] TOTP sets the two_factor_auth_passed key into the session
[x] WebAuthn sets the two_factor_auth_passed key into the session
[x] gss slave -> @mrvahedi68 is investigating

shokri-navid commented 1 year ago

https://github.com/nextcloud/globalsiteselector#manualusermapping We need to create a mapping configuration file to provide available user backends to inquire about the absent user in the master database.

michielbdejong commented 1 year ago

create a mapping configuration file to provide available user backends

-> created issue 6 about that

michielbdejong commented 1 year ago

Using setup-gss.sh we can now confirm the SAML -> GSS leader -> GSS follower flow, and indeed we see there that by the time we're logged in to the follower and opening the mfachecker app, the SAML attribute is not in scope anymore. That is what we'll fix in #3.