Skip to content

Warn users about upcoming OTP for session MFA deprecation#48096

Merged
codingllama merged 1 commit intomasterfrom
codingllama/totp-session-warning
Oct 29, 2024
Merged

Warn users about upcoming OTP for session MFA deprecation#48096
codingllama merged 1 commit intomasterfrom
codingllama/totp-session-warning

Conversation

@codingllama
Copy link
Copy Markdown
Contributor

@codingllama codingllama commented Oct 29, 2024

Warn users about the impending removal of OTP for session MFA uses.

This is the Teleport 17, item 2) mentioned by #47856.

UX example:

tsh ssh llama@zarq
MFA is required to access Node "zarq"

WARNING: Starting with Teleport 18, OTP will not be accepted for per-session MFA.

Enter an OTP code from a device:

Changelog: Warn users about upcoming OTP for session MFA deprecation (tsh)

@codingllama
Copy link
Copy Markdown
Contributor Author

FYI @zmb3.

@aws-amplify-us-west-2
Copy link
Copy Markdown

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-48096.d3pp5qlev8mo18.amplifyapp.com

@codingllama
Copy link
Copy Markdown
Contributor Author

I've opted for a simple client-side change, as it's the simplest/smallest change that does the job. Arguably a server-driven message would be better, but I didn't want to change that much now since we want this to land for the 17 release.

@codingllama codingllama added this pull request to the merge queue Oct 29, 2024
Merged via the queue into master with commit e22aad3 Oct 29, 2024
@codingllama codingllama deleted the codingllama/totp-session-warning branch October 29, 2024 20:21
@public-teleport-github-review-bot
Copy link
Copy Markdown

@codingllama See the table below for backport results.

Branch Result
branch/v17 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants