Closed Bug 1427503 Opened 3 years ago Closed 3 years ago

Allow all users to use Duo as the MFA provider.

Categories

(bugzilla.mozilla.org :: General, enhancement)

Production
enhancement
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: tomprince, Assigned: tomprince)

Details

Attachments

(1 file)

PR
45 bytes, text/x-github-pull-request
dylan
: review+
Details | Review
Mozilla allows external contributors to enroll in duo, so they should be allowed to use that on bugzilla (and thus phabricator) rather than needing a separate MFA method for those sites.
Question for kang: With this change, all users will be able to pre-auth against duo (using the JSON RPC method /auth/v2/preauth),
is that okay? Should we be concerned with that at all?
Flags: needinfo?(gdestuynder)
Attached file PR
Attachment #8939279 - Flags: review+
If you're able to determine which users should have a Duo account with us (which is all LDAP accounts except for service accounts), then it should be fine.
Otherwise, they may not be able to access. That would be my only concern at this point.
Flags: needinfo?(gdestuynder)
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.