Closed Bug 1427503 Opened 3 years ago Closed 3 years ago
Allow all users to use Duo as the MFA provider
Mozilla allows external contributors to enroll in duo, so they should be allowed to use that on bugzilla (and thus phabricator) rather than needing a separate MFA method for those sites.
Question for kang: With this change, all users will be able to pre-auth against duo (using the JSON RPC method /auth/v2/preauth), is that okay? Should we be concerned with that at all?
If you're able to determine which users should have a Duo account with us (which is all LDAP accounts except for service accounts), then it should be fine. Otherwise, they may not be able to access. That would be my only concern at this point.
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.