Re: [Unity-idm-discuss] signaling 2FA usage

[Krzysztof B. <kb...@un...>]

Hi,

W dniu 02.03.2022 o 09:39, Sander Apweiler pisze:
> Good morning Krzysztof,
>
> On Tue, 2022-03-01 at 17:24 +0100, Krzysztof Benedyczak wrote:
>> hi,
>>
>> W dniu 01.03.2022 o 08:15, Sander Apweiler pisze:
>>> Good morning Krzysztof,
>>> good morning Roman,
>>>
>>> sorry for the next topic I open here. Hopefully it is easy to
>>> answer/solve. We are testing the 2FA using OTP. So far it works
>>> fine.
>>> But we are looking how we could signal a service that 2FA was used.
>>> Is
>>> there a way to get this information within unity? Maybe fetching
>>> the
>>> credentials status and if it is enabled for the user could help.
>> Unfortunately it is not exposed in output profile context. There are
>> authenticated identities but no info about factors used to
>> authenticate.
>> Adding that is basically one line of code (maybe two - there are two
>> factors) - so no problem to deliver that quickly.
> That would be great. In this case we could avoid having multiple Oauth
> or SAML one with mandatory 2FA and one with optional.

No problem, I've opened a ticket to track that, should be in the next 
feature release.

Best,
Krzysztof