Details
-
Type: Improvement
-
Status: Open
-
Priority: Major
-
Resolution: Unresolved
-
Affects Version/s: 3.0.0
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
Description
To add support for LDAP and other login systems, we should add an event that is triggered upon authentication.
If the event returns a username (non-boolean-false) then the user has been authenticated. If false, then the user should be authenticated through Blesta's normal authentication process.
In either case, two-factor authentication should process normally (i.e. if enabled must be enforced).
NOTE: MUST ONLY BE DONE IF CORE-908 is complete, otherwise this opens the door for DOS attacks.
Issue Links
- is blocked by
-
CORE-908 Log invalid username login attempts
- Open