rhtyd edited a comment on pull request #5683:
URL: https://github.com/apache/cloudstack/pull/5683#issuecomment-967024746


   Thanks @DaanHoogland - yes by enforcing I meant that when 2FA is not 
provided in login it doesn't check 2FA code. In prod, we want to enforce checks 
at backend for all user-accounts which has 2FA enabled.
   
   This doesn't require any integration/identities with Google;
   - As a quick hack the QR code is generated by Google charts, in prod. the 
CloudStack UI or backend would generate that
   - Google Authenticator is just the app to show us 2FA codes, other phone 
apps that do 2FA code by scanning QR code can work too 
(https://www.maketecheasier.com/google-authenticator-alternatives/). I've only 
used google authenticator as an example and to test.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to