Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-285

Confirm before changing OTP Policy

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Minor
    • Archive - 21'
    • RH-SSO-7.0.0.GA
    • Server

    Description

      Before saving the changes in OTP Policy setting, there should be a warning that Authenticator will be reseted/disabled for all users in the realm.
      I believe this could be a minor security risk - a simple OTP attribute change (like token period) will immediately disable one of the security layers for the whole realm without any notice.

      Attachments

        Activity

          People

            Unassigned Unassigned
            rh_vmuzikar Václav Muzikář
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: