Skip to content

[v16] Skip active desktop session prompt when per-session MFA is enabled#54927

Merged
gzdunek merged 1 commit intobranch/v16from
gzdunek/backport-54848/v16
May 22, 2025
Merged

[v16] Skip active desktop session prompt when per-session MFA is enabled#54927
gzdunek merged 1 commit intobranch/v16from
gzdunek/backport-54848/v16

Conversation

@gzdunek
Copy link
Copy Markdown
Contributor

@gzdunek gzdunek commented May 19, 2025

Backport #54848 to branch/v16

There are some differences vs the original PR because of changes in this backport #51854.

changelog: Disabled the "another session is active" prompt when per-session MFA is enabled, since MFA already enforces user confirmation when starting a desktop session

…54848)

* Skip active desktop session prompt when per-session MFA is enabled

* Correctly verify per-session MFA requirement for leaf clusters

We should check it for a resource's cluster ID (which may be a leaf cluster) not a static root cluster ID.

(cherry picked from commit 68c5033)
@gzdunek gzdunek requested a review from avatus May 21, 2025 13:06
@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from kiosion May 21, 2025 15:32
@gzdunek gzdunek added this pull request to the merge queue May 22, 2025
Merged via the queue into branch/v16 with commit 0188b82 May 22, 2025
41 checks passed
@gzdunek gzdunek deleted the gzdunek/backport-54848/v16 branch May 22, 2025 08:01
@fheinecke fheinecke mentioned this pull request May 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants