Allow admins to configure if 2FA setup during login is allowed
Open
Nobody has claimed this yet.
1. to develop
enhancement
feature: authentication
feature: settings
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
With Nextcloud 17 it's possible to set up 2FA providers during login. There might be cases where admins do not want to allow this. For those we should have admin settings if – or even which specific providers – are allowed to be set up during login.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the login-time 2FA setup flow and the existing administrator settings for 2FA providers. Determine how provider-specific availability is represented and what configuration path controls setup during login. Done means administrators can disable setup or select allowed providers, with coverage for the resulting login behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100