- Posts: 29
MFA Captive - user is logged on Moodle before entering a code
- rbi
- Topic Author
- Offline
- Junior Member
-
Less
More
1 week 2 days ago #1
by rbi
MFA Captive - user is logged on Moodle before entering a code was created by rbi
This message contains secure information
Please Log in or Create an account to join the conversation.
- Antonio Durán
-
- Offline
- Moderator
-
Less
More
- Posts: 7909
1 week 2 days ago #2
by Antonio Durán
Replied by Antonio Durán on topic MFA Captive - user is logged on Moodle before entering a code
Hi.
Have you changed the config of the event to use in the Joomdle user plugin?
After checking, I see that the onUserLogin event will fire before MFA is completed, so if you are using that even, please change to onUserAfterLogin (the default) and test.
Have you changed the config of the event to use in the Joomdle user plugin?
After checking, I see that the onUserLogin event will fire before MFA is completed, so if you are using that even, please change to onUserAfterLogin (the default) and test.
Please Log in or Create an account to join the conversation.
- rbi
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 29
1 week 2 days ago #3
by rbi
Replied by rbi on topic MFA Captive - user is logged on Moodle before entering a code
it is set on onUserAfterLogin
Please Log in or Create an account to join the conversation.
- Antonio Durán
-
- Offline
- Moderator
-
Less
More
- Posts: 7909
1 week 2 days ago #4
by Antonio Durán
Replied by Antonio Durán on topic MFA Captive - user is logged on Moodle before entering a code
My bad. I checked the code, and even if the default is set to onUserAfterLogin, the code used onUserLogin for the default! I have changed it for next release....
For now, please try saving the plugin to see if that helps.... although I am thinking it should save when you published it, so I am not sure.....
For now, please try saving the plugin to see if that helps.... although I am thinking it should save when you published it, so I am not sure.....
Please Log in or Create an account to join the conversation.
- rbi
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 29
1 week 2 days ago #5
by rbi
Replied by rbi on topic MFA Captive - user is logged on Moodle before entering a code
Thanks
Saving the plugin made no difference.
If it is changing the string on the code I can do it if you give me the line in the good file.
Saving the plugin made no difference.
If it is changing the string on the code I can do it if you give me the line in the good file.
Please Log in or Create an account to join the conversation.
- Antonio Durán
-
- Offline
- Moderator
-
Less
More
- Posts: 7909
1 week 1 day ago #6
by Antonio Durán
Replied by Antonio Durán on topic MFA Captive - user is logged on Moodle before entering a code
I could test now locally, and it turns out that Joomla calls onUserAfterLogin before MFA is completed, so this is expected behaviour 
I will need to investigate if there's something we can do. I will report back once I check.
I will need to investigate if there's something we can do. I will report back once I check.
Please Log in or Create an account to join the conversation.
- rbi
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 29
1 week 1 hour ago #7
by rbi
Replied by rbi on topic MFA Captive - user is logged on Moodle before entering a code
This message contains secure information
Please Log in or Create an account to join the conversation.
- Antonio Durán
-
- Offline
- Moderator
-
Less
More
- Posts: 7909
5 days 6 hours ago - 5 days 1 hour ago #8
by Antonio Durán
Replied by Antonio Durán on topic MFA Captive - user is logged on Moodle before entering a code
I have uploaded a new Joomdle version so you can test:
joomdle.com/aux/joomdle_v3.0.2-UNZIP-FIRST.zip
It does something similar to your suggestion:
- if user has no MFA, do SSO as always in the user plugin
- if the user has MFA, don't SSO on the user plugin, but instead we have a new plugin: joomdlemfa. This one will handle SSO for MFA users.
After installing the new package you will need to enable the new joomdlemfa plugin.
I have not released the new version yet, because I prefer that you test it first.
joomdle.com/aux/joomdle_v3.0.2-UNZIP-FIRST.zip
It does something similar to your suggestion:
- if user has no MFA, do SSO as always in the user plugin
- if the user has MFA, don't SSO on the user plugin, but instead we have a new plugin: joomdlemfa. This one will handle SSO for MFA users.
After installing the new package you will need to enable the new joomdlemfa plugin.
I have not released the new version yet, because I prefer that you test it first.
Last edit: 5 days 1 hour ago by Antonio Durán.
Please Log in or Create an account to join the conversation.
- rbi
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 29
5 days 4 hours ago #9
by rbi
Replied by rbi on topic MFA Captive - user is logged on Moodle before entering a code
Thanks Antonio
I cannot download from the browser. Can you check the link you submitted?
I cannot download from the browser. Can you check the link you submitted?
Please Log in or Create an account to join the conversation.
- Antonio Durán
-
- Offline
- Moderator
-
Less
More
- Posts: 7909
5 days 1 hour ago #10
by Antonio Durán
Replied by Antonio Durán on topic MFA Captive - user is logged on Moodle before entering a code
I modified the link, because it was missing https... although the redirect worked fine for me and I can download it.
Try again now.
Try again now.
Please Log in or Create an account to join the conversation.