zlacker

>>mathia+(OP)
I really want to like this but the limitations described, requiring an admin account with 2FA disabled, makes this more risky than not using it at all.

Until those limitations are resolved, if that’s even possible, this feels like an audit hack rather than a security solution.

>>hnlmor+7W
In future versions it will be possible to do the same with, for example, your Google SSO sign-in and 2FA enabled. The reason for the limitation is that we simply wanted to get it out into the world and see if anybody is as excited about it as we are.

>>PhLR+8X
For reference, the azure client, opens a browser for the login, which redirects to a dns address that equates to "localhost" on a port that will effectively get the final auth tokens to the local instance, which then persists and shuts down the service. Should be able to do very similar.