seknox / trasa

Zero Trust Service Access
https://www.trasa.io
Mozilla Public License 2.0
384 stars 68 forks source link

[FEATURE] Allow org admins the ability to disable 2FA login requirement on a per user basis #280

Open zPhilMc opened 3 years ago

zPhilMc commented 3 years ago

Not all users and all scenarios require 2FA to be enabled for every login. When running inside of a closed network without external proxy access, 2FA requirements might have already been met by existing organizational policies and controls. There should be an option to disable 2FA requirement on login globally and on a per user basis.

Specific use cases include the default root admin. 2FA token generating apps cannot generally be shared across multiple admins. The default root admin account should have the option to be locked down with a password only which is protected by administrators in case there is a need to replace or add org admins.

Scope of feature:

flyinghermit commented 3 years ago

Hi, just to confirm, do you mean disabling 2FA for trasa dashboard login? or disabling 2FA for service access via trasa access proxy?