Contrib.social

How to use with for tfa (two factor authentication aka 2fa)

Open on Drupal.org →
Created on 18 August 2021, almost 3 years ago
Updated 27 November 2023, 7 months ago

Problem/Motivation

drupalauth4ssp assumes that a user will be logged in immediately after submitting the user/login form.
This assumption is incompatible with 2-factor authentication via tfa module, which redirects the user/login submit to an interstitial page to complete its identity verification before finalizing authentication.

Is there some switch or configuration option I can implement, or does this require a deeper patch?

💬 Support request
Status

Needs review

Version

1.0

Component

Code

Created by

🇺🇸United States AaronBauman Philadelphia

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment 9 months ago →
    🇳🇱Netherlands TVoesenek

    This is a re-roll of #4, based on 📌 Automated Drupal 10 compatibility fixes Needs review

  • Comment 8 months ago →
    🇳🇱Netherlands johan_vm Tilburg

    This is a re-roll of #5, based on 2.0.0-rc1

  • Comment 7 months ago →
    🇺🇸United States rex.barkdoll

    I'm on the 1.4 version of the module on D9, preparing for an upgrade to D10. I've applied the latest patch (#6) the previous ones wouldn't apply.

    When I complete the TFA verification, the SAML request does not return me to the SP, it leaves me on the IDP's home page.

    Is there a way to complete the SAML loop and return to the SP with the proper credentials?

    I'm also noticing that after I've logged in, when I go to the SP again, it hasn't received the credentials and I have to click on the login link again to authenticate. Since I'm already logged in, it works - but it's a little annoying to go through that twice.

    SOOOOO much appreciation for all the hard work that's gone into this module.

    Also, if people aren't experiencing this same breakage in the 2.x version, I'm happy to upgrade to D10 and retest then.

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024