@JammyDodger , I’ve recently registered an account at for a free instance: [圖片] I am unable to register for a free Discourse site id.discourse.com/create-site There, I appear to experience what t/227972 describes, too: OAuth2 SSO 2FA [圖片] [圖片] Most documentation appears to indicate…

Moved your post here, because this is a different issue than the Contribute > Bug you posted in originally. Discourse ID is not using OAuth2. It’s functioning, in effect, as an SSO provider, which is different. To configure 2FA, you’d need to do so at the SSO provider, ID. Specifically https://id.…

@jomaxro , thanks. Perhaps, what confused me was that I attempted to set enforce_second_factor to “all”, yet wasn’t able to, because I was informed that “You cannot enforce 2FA if local logins are disabled.” If this isn’t too off-topic, what’s the solution to that?

[圖片] roke_julian_lockhart: You cannot enforce 2FA if local logins are disabled.” If this isn’t too off-topic, what’s the solution to that? That’s a good question … and one I don’t have the answer too. I’ve looped in the team to find someone who does!

So I’ve been corrected by the team. Discourse ID does use OAuth2 under the hood - my apologies. I thought it was using a different protocol. To your question, we do not support 2FA with external logins. As the message you saw stated, 2FA cannot be enforced without local logins being enabled. We re…

@jomaxro , does that mean that, with the free trial plan, I cannot modify that preference? Alternatively, can I somehow disconnect Discourse ID?

Want to confirm, are you referring to a free trial, or the free plan?

@jomaxro , apologies. Free plan, I believe: [圖片]

[圖片] jomaxro: We rely on the external login provider (Discourse ID in this case, but this applies to all external providers) to manage 2FA, including enforcement. Question for us: Does the IdP pass along the information of whether or not the user performed MFA to the SP? I’m thinking of the…

[圖片] supermathie: If Discourse ID… or similarly any other IdP (SAML? oAuth2? OIDC?) passes this information along to the SP it would be a piece of information we could potentially use. The standards way to do this is via OIDC. Discourse ID is currently built using OAuth2 only. To support an M…

Discourse ID 与双因素认证

支持

roke_julian_lockhart (Mr Beedell, Roke Julian Lockhart) 2026年四月17日 22:07 17

@jomaxro，抱歉。是免费版计划，我认为是：

話題		回覆	觀看
How Discourse ID works Site Management discourse-id	23	3175	2026年七月13日
Discourse ID is now available. Try it today! Announcements discourse-id	39	2511	2026年二月9日
Two-factor local login option Feature	41	14781	2018年二月8日
Cannot enable 2FA after OAuth2 login Bug	1	620	2022年七月9日
How to enable discourse id login in my site SSO discourse-id	3	409	2025年十月26日

Discourse ID 与双因素认证

相關主題