Re: [Unity-idm-discuss] signaling 2FA usage

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 21.04.2022 o 07:47, Sander Apweiler pisze:
> Good morning Krzysztof,
> was this added to 3.9.0 release? If yes how do we configure this? At
> least I didn't find it in the manual.

Yes, it was :-)

See 
https://www.unity-idm.eu/documentation/unity-3.9.0/manual.html#_output_translation

in the mvel context you have new variables: 'mfa' and 'authenticatedWith'.

HTH,
Krzysztof



> Best regards,
> Sander
>
> On Thu, 2022-03-03 at 09:03 +0100, Krzysztof Benedyczak wrote:
>> Hi,
>>
>> W dniu 02.03.2022 o 09:39, Sander Apweiler pisze:
>>> Good morning Krzysztof,
>>>
>>> On Tue, 2022-03-01 at 17:24 +0100, Krzysztof Benedyczak wrote:
>>>> hi,
>>>>
>>>> W dniu 01.03.2022 o 08:15, Sander Apweiler pisze:
>>>>> Good morning Krzysztof,
>>>>> good morning Roman,
>>>>>
>>>>> sorry for the next topic I open here. Hopefully it is easy to
>>>>> answer/solve. We are testing the 2FA using OTP. So far it works
>>>>> fine.
>>>>> But we are looking how we could signal a service that 2FA was
>>>>> used.
>>>>> Is
>>>>> there a way to get this information within unity? Maybe
>>>>> fetching
>>>>> the
>>>>> credentials status and if it is enabled for the user could
>>>>> help.
>>>> Unfortunately it is not exposed in output profile context. There
>>>> are
>>>> authenticated identities but no info about factors used to
>>>> authenticate.
>>>> Adding that is basically one line of code (maybe two - there are
>>>> two
>>>> factors) - so no problem to deliver that quickly.
>>> That would be great. In this case we could avoid having multiple
>>> Oauth
>>> or SAML one with mandatory 2FA and one with optional.
>> No problem, I've opened a ticket to track that, should be in the next
>> feature release.
>>
>> Best,
>> Krzysztof
>>