perun icon indicating copy to clipboard operation
perun copied to clipboard

feat(cli): resolve MFA exception for command line tools

Open Johaney-s opened this issue 3 years ago • 0 comments

  • if Perun throws MfaPrivilegeException, CLI tools need to instruct user to authenticate with Multi-Factor
  • this is done by setting enforce_mfa property in OIDC config
  • then when authentication request is sent, it prepends MFA acr value so that MFA is done along with standard OIDC authentication
  • new access token is given to the user, thus the session is renewed in Perun and MFA role is loaded to the principal

Johaney-s avatar Aug 25 '22 08:08 Johaney-s