Per User MFA

Registered by Morgan Fainberg

See specification link

Blueprint information

Status:
Complete
Approver:
Morgan Fainberg
Priority:
Medium
Drafter:
Morgan Fainberg
Direction:
Approved
Assignee:
Morgan Fainberg
Definition:
Approved
Series goal:
Accepted for ocata
Implementation:
Implemented
Milestone target:
milestone icon ocata-rc1
Started by
Steve Martinelli
Completed by
Steve Martinelli

Related branches

Sprints

Whiteboard

(stevemar - 12/30/2016): Bumping to next release as it was not started by the agreed upon feature proposal freeze deadline
(stevemar - 1/20/2017): FFE granted

Gerrit topic: https://review.openstack.org/#q,topic:bp/per-user-auth-plugin-reqs,n,z

Addressed by: https://review.openstack.org/418166
    Add user_mfa_rules table

Addressed by: https://review.openstack.org/420955
    Auth Method Handlers now return a response object always

Addressed by: https://review.openstack.org/422817
    Add SQL Upgrade Tests for MFA rules

Addressed by: https://review.openstack.org/422912
    Auth Plugins pass data back via AuthHandlerResponse

Addressed by: https://review.openstack.org/423548
    Process and validate auth methods against MFA rules

Addressed by: https://review.openstack.org/426431
    Implement better validation for resource options

Addressed by: https://review.openstack.org/424220
    Create user option `ignore_lockout_failure_attempts`

Addressed by: https://review.openstack.org/426463
    cleanup release notes from PCI options

Addressed by: https://review.openstack.org/426955
    Add validation for mfa rule validator (storage)

Addressed by: https://review.openstack.org/426959
    Add validation that token method isn't needed in MFARules

Addressed by: https://review.openstack.org/427328
    Add MFA Rules Release Note

Addressed by: https://review.openstack.org/427026
    Remove de-dupe for MFA Rule parsing.

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.