I know, this is strange, but in my previous installation with Guacamole 1.1, I used the MysticRyuujin (https://github.com/MysticRyuujin/guac-install) script, and only the administrator had MFA enabled.
Yesterday, I used the MysticRyuujin script to upgrade to 1.2, and now I have the Duo MFA enabled for all my users. It’s strange Da: Nick Couchman <[email protected]> Inviato: martedì 7 luglio 2020 15:53 A: [email protected] Oggetto: Re: enable MFA only for admin user On Tue, Jul 7, 2020 at 9:26 AM Enrico FANTI <[email protected]<mailto:[email protected]>> wrote: Hi. It’s possible to enable MFA (Duo or OTP) only for admin user ? No, the authentication extensions apply to the entire system, and all users on the system, so Duo or TOTP would either apply to all users of the system or none. If you use RADIUS with a MFA provider you might be able to accomplish it with rules on the RADIUS provider by having different policies for different users. -Nick
