Re: [DISCUSS] 2FA framework and plugins for CloudStack

2021-12-02 Thread Rohit Yadav
mail based OTP 2FA plugin too. Regards. From: vas...@gmx.de Sent: Monday, November 29, 2021 17:14 To: users@cloudstack.apache.org Subject: Re: [DISCUSS] 2FA framework and plugins for CloudStack Hi Rohit, this sounds awesome and for me it is a absolute +1

Re: [DISCUSS] 2FA framework and plugins for CloudStack

2021-11-29 Thread vas...@gmx.de
Hi Rohit, this sounds awesome and for me it is a absolute +1, as in my organization this is a major concern with cloudstack atm. Regarding the puprosed " general-purpose 2FA plugins": I would suggest to exchange the PIN - option against another type of factor, as as far i am aware a user genarate

[DISCUSS] 2FA framework and plugins for CloudStack

2021-11-29 Thread Rohit Yadav
All, During CCC21 hackathon, I explored the feasibility of a 2FA framework and a TOTP (time-based OTP) plugin that can be used with Google Authenticator, MS Authenticator, Authy etc. I've used ideas of TOTP based 2FA PoC to put together a design doc for discussion: https://cwiki.apache.org/con