MFA Captive - user is logged on Moodle before entering a code

  • rbi
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
1 week 2 days ago #1 by rbi
This message contains secure information

Please Log in or Create an account to join the conversation.

More
1 week 2 days ago #2 by Antonio Durán
Hi.

Have you changed the config of the event to use in the Joomdle user plugin?

After checking, I see that the onUserLogin event will fire before MFA is completed, so if you are using that even, please change to onUserAfterLogin (the default) and test.

Please Log in or Create an account to join the conversation.

  • rbi
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
1 week 2 days ago #3 by rbi
it is set on onUserAfterLogin

Please Log in or Create an account to join the conversation.

More
1 week 2 days ago #4 by Antonio Durán
My bad. I checked the code, and even if the default is set to onUserAfterLogin, the code used onUserLogin for the default! I have changed it for next release....

For now, please try saving the plugin to see if that helps.... although I am thinking it should save when you published it, so I am not sure.....

Please Log in or Create an account to join the conversation.

  • rbi
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
1 week 2 days ago #5 by rbi
Thanks
Saving the plugin made no difference.
If it is changing the string on the code I can do it if you give me the line in the good file.

Please Log in or Create an account to join the conversation.

More
1 week 1 day ago #6 by Antonio Durán
I could test now locally, and it turns out that Joomla calls onUserAfterLogin before MFA is completed, so this is expected behaviour :(

I will need to investigate if there's something we can do. I will report back once I check.

Please Log in or Create an account to join the conversation.

  • rbi
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
1 week 1 hour ago #7 by rbi
This message contains secure information

Please Log in or Create an account to join the conversation.

More
5 days 6 hours ago - 5 days 1 hour ago #8 by Antonio Durán
I have uploaded a new Joomdle version so you can test:
joomdle.com/aux/joomdle_v3.0.2-UNZIP-FIRST.zip

It does something similar to your suggestion:
- if user has no MFA, do SSO as always in the user plugin
- if the user has MFA, don't SSO on the user plugin, but instead we have a new plugin: joomdlemfa. This one will handle SSO for MFA users.

After installing the new package you will need to enable the new joomdlemfa plugin.

I have not released the new version yet, because I prefer that you test it first.
Last edit: 5 days 1 hour ago by Antonio Durán.

Please Log in or Create an account to join the conversation.

  • rbi
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
5 days 4 hours ago #9 by rbi
Thanks Antonio
I cannot download from the browser. Can you check the link you submitted?

Please Log in or Create an account to join the conversation.

More
5 days 1 hour ago #10 by Antonio Durán
I modified the link, because it was missing https... although the redirect worked fine for me and I can download it.
Try again now.

Please Log in or Create an account to join the conversation.