Re: [Unity-idm-discuss] signaling 2FA usage

[Krzysztof B. <kb...@un...>]

hi,

W dniu 01.03.2022 o 08:15, Sander Apweiler pisze:
> Good morning Krzysztof,
> good morning Roman,
>
> sorry for the next topic I open here. Hopefully it is easy to
> answer/solve. We are testing the 2FA using OTP. So far it works fine.
> But we are looking how we could signal a service that 2FA was used. Is
> there a way to get this information within unity? Maybe fetching the
> credentials status and if it is enabled for the user could help.

Unfortunately it is not exposed in output profile context. There are 
authenticated identities but no info about factors used to authenticate. 
Adding that is basically one line of code (maybe two - there are two 
factors) - so no problem to deliver that quickly.

> Another question which might be raised y the user is, how could I
> delete the 2FA instead of disabling it. Is this possible?
>
We block this operation on HomeUI intentionally. It can be requested via 
admin (in console that's possible). In general that's very risky (user 
can lock herself out from service), and perhaps super rare operation.

Best,
Krzysztof