Re: MFA for some users only

[Cyrus <cy...@gmail.com>]

Any platform implementing MFA or SAML2/OIDC provides "app passwords" or
token for machine to machine interaction (including API calls).

My 2 cents.

On Wed, Oct 23, 2024, 22:48 Barnhart, Steven <ba...@osu.edu> wrote:

> How do you anticipate api calls working with this attitude?
>
> –Steve
> ------------------------------
> *From:* Sean Hulbert <sh...@securitycentric.net.INVALID>
> *Sent:* Wednesday, October 23, 2024 11:27:49 PM
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> *Subject:* Re: MFA for some users only
>
> I highly recommend you do not implement this, you will be sorry when your
> system is compromised, IP addresses can be spoofed and brute force will rip
> through passwords specially GPU Ai. Thank You Sean Hulbert Security Centric
> Inc. A Cybersecurity
>
> I highly recommend you do not implement this, you will be sorry when your
> system is compromised, IP addresses can be spoofed and brute force will rip
> through passwords specially GPU Ai.
>
>
> *Thank You*
> Sean Hulbert
>
>
> *Security Centric Inc.*
> A Cybersecurity Virtualization Enablement Company
> *StormCloud Gov, Protected CUI Environment!*
>
>
> Industry's most secure CMMC/iTAR virtual desktops!
>
>
> *FedRAMP MIL4 in process (RAR)*
> System Award Management
> *CAGE: 8AUV4*
> *SAM ID: UMJLJ8A7BMT3*
>
> AFCEA San Francisco Chapter President
> If you have heard of a hacker by name, he/she has failed, fear the hacker
> you haven’t heard of!
>
> CONFIDENTIALITY NOTICE: This communication with its contents may contain
> confidential and/or legally privileged information. It is solely for the
> use of the intended recipient(s). Unauthorized interception, review, use or
> disclosure is prohibited and may violate applicable laws including the
> Electronic Communications Privacy Act. If you are not the intended
> recipient, please contact the sender and destroy all copies of the
> communication. Content within this email communication is not legally
> binding as a contract and no promises are guaranteed unless in a formal
> contract outside this email communication.
>
> igitur qui desiderat pacem, praeparet bellum!!!
>
> Epitoma Rei Militaris
> On 10/23/2024 7:25 PM, Barnhart, Steven wrote:
>
> Yes I believe it’ll be in 1.6.
>
> https://issues.apache.org/jira/browse/GUACAMOLE-1855
> <https://urldefense.com/v3/__https://issues.apache.org/jira/browse/GUACAMOLE-1855__;!!KGKeukY!1wOEeMw1a1q0ZS-JGO4pu2cNQ55lOOVyDTGjPLLW_Uht7J2ODhmI8khNLcPITwXvlwTsuO9h-Rdb-ytmN3xCrBzIOJnBce59G9Sg$>
>
> –Steve
> ------------------------------
> *From:* Luciano Oliveira <ol...@outlook.com> <ol...@outlook.com>
> *Sent:* Wednesday, October 23, 2024 9:47:40 PM
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> <us...@guacamole.apache.org>
> *Subject:* RE: MFA for some users only
>
> I am also waiting for this feature. From what I've researched, it may be
> available in version 1. 6. 0. De: Paul Burrett <paul. burrett@ topenergy.
> co. nz> <paul.%E2%80%8Aburrett@%E2%80%8Atopenergy.%E2%80%8Aco.%E2%80%8Anz>
> Enviado: quarta-feira, 23 de outubro de 2024 21: 54 Para: user@
> guacamole. apache. org <user@ guacamole. apache. org>
> <user@%E2%80%8Aguacamole.%E2%80%8Aapache.%E2%80%8Aorg>
> I am also waiting for this feature. From what I've researched, it may be
> available in version 1.6.0.
>
> ------------------------------
> *De:* Paul Burrett <pa...@topenergy.co.nz>
> <pa...@topenergy.co.nz>
> *Enviado:* quarta-feira, 23 de outubro de 2024 21:54
> *Para:* user@guacamole.apache.org <us...@guacamole.apache.org>
> <us...@guacamole.apache.org>
> *Assunto:* MFA for some users only
>
>
> I want to know if there is a way to set MFA for some users or a group of
> users or exempt users.
>
>
>
>
>
>