| Summary: | Don't ask for 2FA OTP after SSO login | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Magnus Enger <magnus> |
| Component: | Authentication | Assignee: | Bugs List <koha-bugs> |
| Status: | NEW --- | QA Contact: | Testopia <testopia> |
| Severity: | normal | ||
| Priority: | P5 - low | CC: | dcook, dpavlin |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
|
Description
Magnus Enger
2026-01-09 14:03:51 UTC
Yeah, this is an interesting point. I can understand wanting to enforce 2FA/MFA on local logins but not SSO because your SSO Identity Provider might be enforcing 2FA/MFA on that end. I suppose there are Koha setups where people might want the 2FA/MFA on local logins and SSO though, so maybe we do need more options? (In reply to David Cook from comment #1) > so maybe we do need more options? *hides from all the objects people might throw at him for suggesting more options/preferences* |