Nathan Gough created NIFI-6823:
----------------------------------
Summary: Investigate adding 2FA to NiFi
Key: NIFI-6823
URL: https://issues.apache.org/jira/browse/NIFI-6823
Project: Apache NiFi
Issue Type: Improvement
Components: Security
Reporter: Nathan Gough
Assignee: Nathan Gough
It would be great to see two-factor authentication options added to NiFi. I
believe there can be two solutions which can be investigated and added:
# External identity providers which offer 2FA/2SV (easy)
## Allow a NiFi administrator to enforce 2SV for NiFi users
# A native solution (hard)
## Will require some level of native user tracking to track shared keys per
user for TOTP. Currently NiFi stores basically no details of users or their
passwords.
### Secure hashing of passwords using bcrypt/scrypt or some other password
hashing mechanism
## Uses an open source library to handle TOTP
### Must allow users to initialize, enter and verify TOTP values
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
