Re: [Unity-idm-discuss] signaling 2FA usage

[Sander A. <sa....@fz...>]

Good morning Krzysztof,

On Tue, 2022-03-01 at 17:24 +0100, Krzysztof Benedyczak wrote:
> hi,
> 
> W dniu 01.03.2022 o 08:15, Sander Apweiler pisze:
> > Good morning Krzysztof,
> > good morning Roman,
> > 
> > sorry for the next topic I open here. Hopefully it is easy to
> > answer/solve. We are testing the 2FA using OTP. So far it works
> > fine.
> > But we are looking how we could signal a service that 2FA was used.
> > Is
> > there a way to get this information within unity? Maybe fetching
> > the
> > credentials status and if it is enabled for the user could help.
> 
> Unfortunately it is not exposed in output profile context. There are 
> authenticated identities but no info about factors used to
> authenticate. 
> Adding that is basically one line of code (maybe two - there are two 
> factors) - so no problem to deliver that quickly.
That would be great. In this case we could avoid having multiple Oauth
or SAML one with mandatory 2FA and one with optional.
> 
> > Another question which might be raised y the user is, how could I
> > delete the 2FA instead of disabling it. Is this possible?
> > 
> We block this operation on HomeUI intentionally. It can be requested
> via 
> admin (in console that's possible). In general that's very risky
> (user 
> can lock herself out from service), and perhaps super rare operation.
OK. I understand it fully. So we would just document that this
operation must be requested via ticket.

Best regards,
Sander
> 
> Best,
> Krzysztof
> 
> 

-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht,
Prof. Dr. Frauke Melchior
-----------------------------------------------------------------------
-----------------------------------------------------------------------