# Block enforce second factor if enable local logins is disabled

**URL:** https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216
**Category:** Bug
**Created:** [July 28, 2019, 8:59pm UTC](https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216 "2019-07-28T20:59:54Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [July 28, 2019, 8:59pm UTC](https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216/1 "2019-07-28T20:59:54Z")

</div>

A user can put the forum into a very broken state if the settings are:

```plaintext
enable local logins = false
enforce second factor = staff (or all)

```

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [July 28, 2019, 9:49pm UTC](https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216/2 "2019-07-28T21:49:21Z")

</div>

Should be an easy one, can you take that @osama? Perhaps ignore this setting altogether if enable local logins is off.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [November 15, 2019, 7:02pm UTC](https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216/9 "2019-11-15T19:02:01Z")

</div>

This is fixed now [pending PR](https://github.com/discourse/discourse/pull/8355).

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [November 15, 2019, 7:02pm UTC](https://meta.discourse.org/t/block-enforce-second-factor-if-enable-local-logins-is-disabled/124216/10 "2019-11-15T19:02:04Z")

</div>


