Aktuelle Projekte - September 2025

[rokejulianlockhart (Mr. Beedell, Roke Julian Lockhart (RJLB))]

@Moin, das bin ich. Danke. Gibt es eine Anforderungsbeschreibung (FR), die OAuth2-SSO mit aktivierter 2FA ermöglicht? Ich frage, weil andere Plattformen dies definitiv gleichzeitig zulassen.

Why is 2FA incompatible with Associated Accounts?

Well, the reason being is that your associated accounts can also be compromised, and AFAIK associated accounts bypass the 2FA restriction on forum accounts. That is why 2FA suppresses associated accounts. Associated accounts can be compromised, especially without 2FA allowing bad-actors to therefore, log into your forum account as well. However, there is a site setting you can modify to stop 2FA-accounts from suppressing associated account logins. It’s named Enforce second factor on external au…