Rocket.chat: Require Two Factor Auth for external authenticators

[ghost]

Rocket.Chat Version: 0.55.1
Running Instances: 1
DB Replicaset OpLog: off
Node Version: 4.7.3

Hello Devs.

I have an issue with 2FA. After enabling it i can still login without entering a 2FA code. Is that a known issue?

thanks and cheers

[patrickhanft]

I just found similar behaviour. We let SAML handle the authentication and just wanted to try out 2FA. But after enabling it, I still get immediately logged in without any 2FA check.

Or is this a feature from your point of view? One could argue that 2FA should also happen on the SAML authentication layer …

[shakalandy]

Same Issue here with Active Directory as LDAP backend.

[sampaiodiego]

We'll look into requering 2FA for any authentication method.

[sc10n]

Thanks for looking into this! Is there a timeline for this? We use AD as the LDAP backend and have a hard requirement for 2FA which is preventing us from rolling out a large scale deployment.

[baurmatt]

We're also interested in activating 2FA for our RocketChat Setup which currently uses LDAP authentication.

[wiegandsh]

Any news regarding this issue?

[ghost]

Any progress on that matter?

[EtienneBer]

Hello

Any news ?

[shakalandy]

Possible to sponsor this one? Maybe via Bountysource?

[Hudell]

@shakalandy it was already implemented and will be included in one of the next releases.

[marcinkorzycki]

In which release are you plan to add it? We want to use it ASAP.

[midse]

Any news regarding this issue? 2 FA Authentication is bypassed when using LDAP auth.

[wreiske]

👀

[karlettoh]

Tested this in 1.0.0-rc.2 and 0.74.3 and 2FA is bypassed when using LDAP still.