Skip to content

SSO config to skip 2FA on login#6833

Open
kowalski7cc wants to merge 1 commit intodani-garcia:mainfrom
kowalski7cc:feature/sso-disable-2fa
Open

SSO config to skip 2FA on login#6833
kowalski7cc wants to merge 1 commit intodani-garcia:mainfrom
kowalski7cc:feature/sso-disable-2fa

Conversation

@kowalski7cc
Copy link
Copy Markdown

@kowalski7cc kowalski7cc commented Feb 15, 2026

Allow users to skip 2FA on SSO, userful when an external IdP has already multiple 2FA options.

Tested on Web Vault, Chrome Extension and Android app.

Signed-off-by: Kowalski Dragon (kowalski7cc) <kowalski7cc@users.noreply.github.com>
@kowalski7cc
Copy link
Copy Markdown
Author

@BlackDex @dani-garcia is this an acceptable change? Hope you can review this pull 😃

@stefan0xC
Copy link
Copy Markdown
Contributor

stefan0xC commented Apr 13, 2026

If we want to skip 2FA for SSO shouldn't this be done properly i.e. by requesting a specific acr level when authenticating with SSO so we make sure that the IdP is actually using 2FA?

@kowalski7cc
Copy link
Copy Markdown
Author

Well it could be a tri-state where you can skip always (as workaround or testing), automatically (acr level) or never (current behavior). To add the automatically I need to read a bit of documentation about the acr 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants