1
[Feature Request] Bypass 2fa prompt for SSO logins
Source: paperless-ngx/paperless-ngx#14097 · opened by @penguintamer
Description For users who have Paperless accounts with TOTP 2fa/mfa, logging in with the configured SSO (OIDC) provider returns them to the TOTP entry page as if they had successfully authenticated with their username and password, rather than being directly logged in, as most services with external authentication do. Since my IdP already enforces MFA, this means users have to enter two different TOTP codes when signing into Paperless-ngx. I don't want to disable local passwords / TOTP entirely, because it's necessary when there's an issue/outage with the OIDC provider. Steps to reproduce: 1. Set up a Paperless-ngx server with an OIDC authentication provider 2. Log in with an OIDC user account 3. Add a password and authenticator to the account 4. Log out and back in with that user via OIDC 5. User is presented with the page to enter TOTP authenticator Expected: OIDC handles authentication entirely, and user is not prompted for additional authenticatio…
No pledges yet. Be the first to back this.
Comments
Similar requests
[Feature Request] Scoped style/instruction customization for AI suggestion prompts
1 vote · 0 comments
Customizable AI prompt templates for suggestions (incl. custom fields)
12 votes · 0 comments
[Feature Request] Context aware tag reccomendations/prompting
1 vote · 0 comments
[Feature Request] Dynamically grant Superuser/Staff status to OIDC/SSO users based on group claims
4 votes · 0 comments
[Feature Request] Optimize AI suggestion generation
5 votes · 0 comments
No comments yet.