Follow-up to comment #3044 (comment).
MFA flows should be assignable to locations:
- location may have a default MFA flow assigned
- location may have multiple ordered (group set) -> (MFA flow) assignments
- resolution is done sequentially, if user doesn't match any group-to-flow assignment, use the default MFA flow
Prototype:
As discussed, when the license expires - only MFA flow with the lowest id is active and respected system-wide.
@Va1ter - Do we need to think how to incorporate this into location creation wizard and initial wizard? During initial wizard no MFA flows are defined yet.
Follow-up to comment #3044 (comment).
MFA flows should be assignable to locations:
Prototype:
As discussed, when the license expires - only MFA flow with the lowest id is active and respected system-wide.
@Va1ter - Do we need to think how to incorporate this into location creation wizard and initial wizard? During initial wizard no MFA flows are defined yet.